Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Portal for ArcGIS — Vulnerabilities & Security Advisories 65

All 65 CVE vulnerabilities found in Portal for ArcGIS, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerability data for Esri's Portal for ArcGIS, focusing on security weaknesses specific to that product. It collects a curated set of security flaws reported against the product, covering a defined historical period to provide a comprehensive view of its security posture. Readers can use this aggregation to track Esri's security advisories, understand specific weakness classes, and review the complete vulnerability history for Portal for ArcGIS. The collection includes various types of defects, such as remote code execution, information disclosure, and privilege escalation issues, all documented within the target timeframe. This resource serves as a reference for security teams and developers who need to assess risk exposure or verify which vulnerabilities have been identified for this particular component of the Esri ecosystem.

Vendor: Esri

CVE ID Title CVSS Severity Published
CVE-2026-69233 stored cross site scripting issue in Esri Portal for ArcGIS CWE-79 5.5 Medium 2026-08-21
CVE-2026-69234 reflected cross site scripting vulnerability in Esri Portal for ArcGIS CWE-79 6.1 Medium 2026-08-21
CVE-2026-69235 stored cross site scripting issue in Esri Portal for ArcGIS CWE-79 6.1 Medium 2026-08-21
CVE-2026-69236 stored cross site scripting issue in Esri Portal for ArcGIS CWE-79 6.1 Medium 2026-08-21
CVE-2026-69237 HTML injection vulnerability in Esri Portal for ArcGIS CWE-79 3.8 Low 2026-08-21
CVE-2026-69232 stored cross site scripting issue in Esri Portal for ArcGIS CWE-79 5.5 Medium 2026-08-21
CVE-2026-69231 stored cross site scripting issue in Esri Portal for ArcGIS CWE-79 5.5 Medium 2026-08-21
CVE-2026-69230 stored cross site scripting issue in Esri Portal for ArcGIS CWE-79 5.5 Medium 2026-08-21
CVE-2026-69229 HTML injection vulnerability in Esri Portal for ArcGIS CWE-79 5.4 Medium 2026-08-21
CVE-2026-69228 missing authentication vulnerability in Esri Portal for ArcGIS CWE-306 5.3 Medium 2026-08-21
CVE-2026-69225 information disclosure vulnerability in Esri Portal for ArcGIS CWE-200 5.9 Medium 2026-08-21
CVE-2026-69238 HTML injection vulnerability in Esri Portal for ArcGIS CWE-79 3.5 Low 2026-08-21
CVE-2026-69224 information disclosure vulnerability in Esri Portal for ArcGIS CWE-200 5.9 Medium 2026-08-21
CVE-2026-13019 Missing Authentication CWE-640 9.8 Critical 2026-07-07
CVE-2026-13020 Weak Password Recovery Mechanism in Portal for ArcGIS CWE-640 8.1 High 2026-07-07
CVE-2026-33519 Incorrect privilege assignment in Portal for ArcGIS CWE-266 9.8 Critical 2026-04-21
CVE-2026-33518 Incorrect privilege assignment in Portal for ArcGIS CWE-266 9.8 Critical 2026-04-21
CVE-2025-57871 BUG-000174020 - Reflected XSS vulnerability identified in Portal for ArcGIS. (11.3, 11.1, 10.9.1) CWE-79 4.8 Medium 2025-09-29
CVE-2025-57872 BUG-000174150 - Unvalidated redirect in Portal for ArcGIS. CWE-601 6.1 Medium 2025-09-29
CVE-2025-57873 BUG-000175222 - Reflected XSS vulnerability in Portal for ArcGIS. CWE-79 4.8 Medium 2025-09-29
CVE-2025-57874 BUG-000161627 - Reflected XSS vulnerability in Portal for ArcGIS.  (11.3, 11.1, 10.9.1) CWE-79 4.8 Medium 2025-09-29
CVE-2025-57875 BUG-000164122 - Reflected XSS vulnerability in Portal for ArcGIS. CWE-79 4.8 Medium 2025-09-29
CVE-2025-57877 Reflected XSS vulnerability in Portal for ArcGIS. CWE-79 4.8 Medium 2025-09-29
CVE-2025-57878 BUG-000174149 - The Portal for ArcGIS has an unvalidated redirect. CWE-601 6.1 Medium 2025-09-29
CVE-2025-57879 BUG-000171009 - URL manipulation vulnerability in Portal for ArcGIS. CWE-601 6.1 Medium 2025-09-29
CVE-2025-57876 Stored XSS vulnerability in Portal for ArcGIS CWE-79 4.8 Medium 2025-09-29
CVE-2025-4967 Server Side Request Forgery (SSRF) vulnerability in Portal for ArcGIS CWE-918 9.1 Critical 2025-05-29
CVE-2025-2538 BUG-000174336 CWE-798 9.8 Critical 2025-03-20
CVE-2024-38040 BUG-000167984 - Portal for ArcGIS has a Local file inclusion (LFI) vulnerability CWE-73 7.5 High 2024-10-04
CVE-2024-38038 BUG-000165732 - Reflected XSS in Portal for ArcGIS CWE-79 6.1 Medium 2024-10-04

All 65 known CVE vulnerabilities affecting Portal for ArcGIS with full Chinese analysis, references, and POCs where available.