Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Portal for ArcGIS — Vulnerabilities & Security Advisories 65

All 65 CVE vulnerabilities found in Portal for ArcGIS, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerability data for Esri's Portal for ArcGIS, focusing on security weaknesses specific to that product. It collects a curated set of security flaws reported against the product, covering a defined historical period to provide a comprehensive view of its security posture. Readers can use this aggregation to track Esri's security advisories, understand specific weakness classes, and review the complete vulnerability history for Portal for ArcGIS. The collection includes various types of defects, such as remote code execution, information disclosure, and privilege escalation issues, all documented within the target timeframe. This resource serves as a reference for security teams and developers who need to assess risk exposure or verify which vulnerabilities have been identified for this particular component of the Esri ecosystem.

Vendor: Esri

CVE ID Title CVSS Severity Published
CVE-2024-25691 BUG-000165286 - Reflected XSS in Portal for ArcGIS CWE-79 6.1 Medium 2024-10-04
CVE-2024-25707 BUG-000160241 - Reflected XSS in Portal for ArcGIS CWE-79 4.8 Medium 2024-10-04
CVE-2024-8149 BUG-000168624 - Unvalidated redirect in Portal for ArcGIS. CWE-79 4.6 Medium 2024-10-04
CVE-2024-38039 BUG-000161683 - HTML injection vulnerability in Portal for ArcGIS. CWE-80 5.4 Medium 2024-10-04
CVE-2024-8148 BUG-000168624 - Unvalidated redirect in Portal for ArcGIS. (11.2, 11.1, 10.9.1. and 10.8.1) CWE-601 6.1 Medium 2024-10-04
CVE-2024-38037 BUG-000167983 - Unvalidated redirect in Portal for ArcGIS CWE-601 6.1 Medium 2024-10-04
CVE-2024-25699 Portal for ArcGIS has an invalid authentication vulnerability CWE-287 8.5 High 2024-04-04
CVE-2024-25705 Cross site scripting issue in embed widget CWE-79 5.4 Medium 2024-04-04
CVE-2024-25706 HTMLi at createFolder Content Injection CWE-94 6.1 Medium 2024-04-04
CVE-2024-25709 Self-XSS style in move item dialog CWE-79 6.1 Medium 2024-04-04
CVE-2024-25698 Reflected XSS in Portal for ArcGIS CWE-79 6.1 Medium 2024-04-04
CVE-2024-25695 concatenated errors resulting in cross site scripting and frame injection issues. CWE-79 7.2 High 2024-04-04
CVE-2024-25696 Stored XSS in Portal for ArcGIS CWE-79 4.8 Medium 2024-04-04
CVE-2024-25697 Stored XSS in Portal for ArcGIS CWE-79 5.4 Medium 2024-04-04
CVE-2024-25692 BUG-000154722 - Cross-site request forgery (CSRF) issue in Portal for ArcGIS CWE-352 5.4 Medium 2024-04-04
CVE-2023-25833 BUG-000155004 HTML injection issue in Portal for ArcGIS. CWE-80 5.4 Medium 2023-05-10
CVE-2023-25831 BUG-000154236 There is a reflected cross-site scripting (XSS) vulnerability in Portal for ArcGIS. CWE-79 6.1 Medium 2023-05-09
CVE-2023-25830 BUG-000154662 Reflected XSS vulnerability in Portal for ArcGIS CWE-79 6.1 Medium 2023-05-09
CVE-2023-25829 BUG-000155001 - Unvalidated redirect in Portal for ArcGIS. CWE-601 6.1 Medium 2023-05-09
CVE-2023-25832 BUG-000148346 There is a Cross-Site Request Forgery (CSRF) vulnerability in Portal for ArcGIS. CWE-352 8.8 High 2023-05-09
CVE-2023-25834 BUG-000142922 Incomplete permission changes in specific cases. CWE-269 5.4 Medium 2023-05-09
CVE-2022-38203 The allowedProxyHosts property is not fully honored in ArcGIS Enterprise (10.8.1 and 10.7.1 only) CWE-918 7.5 High 2022-12-30
CVE-2022-38189 There is a stored cross-site scripting (XSS) vulnerability in ArcGIS API for JavaScript. CWE-79 5.4 Medium 2022-08-16
CVE-2022-38184 There is an improper access control vulnerability in Portal for ArcGIS versions 10.8.1 CWE-284 7.5 High 2022-08-16
CVE-2022-38192 There is a stored cross-site scripting (XSS) vulnerability in ArcGIS API for JavaScript. CWE-79 6.1 Medium 2022-08-16
CVE-2022-38193 Code injection issue in Portal for ArcGIS (10.7.1 and 10.8.1) CWE-95 6.1 Medium 2022-08-16
CVE-2022-38194 Portal for ArcGIS system properties are not properly encrypted (10.8.1 only) CWE-311 6.7 Medium 2022-08-16
CVE-2022-38191 HTML injection vulnerability in Portal for ArcGIS CWE-74 6.1 Medium 2022-08-15
CVE-2022-38187 Prevent access to sharing/rest/content/features/analyze to unauthorized users CWE-918 7.5 High 2022-08-15
CVE-2022-38188 Esri Portal For ArcGis 跨站脚本漏洞 CWE-79 6.1 - 2022-08-15

All 65 known CVE vulnerabilities affecting Portal for ArcGIS with full Chinese analysis, references, and POCs where available.