Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Portal for ArcGIS — Vulnerabilities & Security Advisories 52

All 52 CVE vulnerabilities found in Portal for ArcGIS, with AI-generated Chinese analysis, references, and POCs.

This document provides a comprehensive overview of security vulnerabilities identified within Portal for ArcGIS, a component of the Esri ArcGIS platform, categorized by common weakness types. The page aggregates known defects spanning from the initial release of the software up to the most recent disclosures, ensuring a complete historical record of security incidents. By consulting this resource, users can effectively track vendor advisories issued by Esri, gain a deeper understanding of specific weakness classes affecting their environment, and look up the full vulnerability history associated with their deployed instances. This centralized approach allows administrators and security professionals to quickly assess risk exposure without sifting through disparate sources. The data presented includes details on affected versions, severity ratings where available, and the status of patches or mitigations. It serves as a critical reference for maintaining the integrity of geographic information systems infrastructure. Understanding these vulnerabilities is essential for implementing appropriate countermeasures, such as upgrading to secure versions or applying temporary workarounds. This page does not offer marketing information or promotional content but focuses strictly on technical security data. Readers are encouraged to cross-reference these findings with official Esri security bulletins for the most accurate and actionable guidance. The scope is limited to software-specific weaknesses and does not cover broader organizational security practices or hardware-related issues.

Vendor: Esri

CVE IDTitleCVSSSeverityPublished
CVE-2024-25697 Stored XSS in Portal for ArcGIS CWE-79 5.4 Medium2024-04-04
CVE-2024-25692 BUG-000154722 - Cross-site request forgery (CSRF) issue in Portal for ArcGIS CWE-352 5.4 Medium2024-04-04
CVE-2023-25833 BUG-000155004 HTML injection issue in Portal for ArcGIS. CWE-80 5.4 Medium2023-05-10
CVE-2023-25831 BUG-000154236 There is a reflected cross-site scripting (XSS) vulnerability in Portal for ArcGIS. CWE-79 6.1 Medium2023-05-09
CVE-2023-25830 BUG-000154662 Reflected XSS vulnerability in Portal for ArcGIS CWE-79 6.1 Medium2023-05-09
CVE-2023-25829 BUG-000155001 - Unvalidated redirect in Portal for ArcGIS. CWE-601 6.1 Medium2023-05-09
CVE-2023-25832 BUG-000148346 There is a Cross-Site Request Forgery (CSRF) vulnerability in Portal for ArcGIS. CWE-352 8.8 High2023-05-09
CVE-2023-25834 BUG-000142922 Incomplete permission changes in specific cases. CWE-269 5.4 Medium2023-05-09
CVE-2022-38203 The allowedProxyHosts property is not fully honored in ArcGIS Enterprise (10.8.1 and 10.7.1 only) CWE-918 7.5 High2022-12-30
CVE-2022-38189 There is a stored cross-site scripting (XSS) vulnerability in ArcGIS API for JavaScript. CWE-79 5.4 Medium2022-08-16
CVE-2022-38184 There is an improper access control vulnerability in Portal for ArcGIS versions 10.8.1 CWE-284 7.5 High2022-08-16
CVE-2022-38192 There is a stored cross-site scripting (XSS) vulnerability in ArcGIS API for JavaScript. CWE-79 6.1 Medium2022-08-16
CVE-2022-38193 Code injection issue in Portal for ArcGIS (10.7.1 and 10.8.1) CWE-95 6.1 Medium2022-08-16
CVE-2022-38194 Portal for ArcGIS system properties are not properly encrypted (10.8.1 only) CWE-311 6.7 Medium2022-08-16
CVE-2022-38191 HTML injection vulnerability in Portal for ArcGIS CWE-74 6.1 Medium2022-08-15
CVE-2022-38187 Prevent access to sharing/rest/content/features/analyze to unauthorized users CWE-918 7.5 High2022-08-15
CVE-2022-38188 Esri Portal For ArcGis 跨站脚本漏洞 CWE-79 6.1 -2022-08-15
CVE-2022-38190 Stored cross-site scripting vulnerability in Esri Portal for ArcGIS Configurable Apps CWE-79 6.1 Medium2022-08-15
CVE-2022-38186 Esri Portal For ArcGis 跨站脚本漏洞 CWE-79 6.1 -2022-08-15
CVE-2021-29110 Stored cross-site scripting (XSS) issue in Esri Portal for ArcGIS may allow a remote unauthenticated attacker to pass and store malicious strings in the home application. CWE-79 5.4 -2021-10-01
CVE-2021-29109 A reflected XSS vulnerability in Esri Portal for ArcGIS version 10.9. CWE-79 6.1 -2021-10-01
CVE-2021-29108 There is an privilege escalation vulnerability in organization-specific logins in Esri Portal for ArcGIS versions 10.9 and below. CWE-347 8.8 High2021-10-01

All 52 known CVE vulnerabilities affecting Portal for ArcGIS with full Chinese analysis, references, and POCs where available.