Vulnerabilities in Esri
177 resultsCVE-2024-38038MEDIUMBUG-000165732 - Reflected XSS in Portal for ArcGISEPSS 0.3%CVE-2026-10758HIGHEsri Lerc has a security vulnerabilityEPSS 0.3%CVE-2026-69231MEDIUMstored cross site scripting issue in Esri Portal for ArcGISEPSS 0.3%CVE-2026-69232MEDIUMstored cross site scripting issue in Esri Portal for ArcGISEPSS 0.3%CVE-2022-38199MEDIUMBUG-000144172 - Remote file download issue in ArcGIS ServerEPSS 0.3%CVE-2023-25834MEDIUMBUG-000142922 Incomplete permission changes in specific cases.EPSS 0.3%CVE-2024-38037MEDIUMBUG-000167983 - Unvalidated redirect in Portal for ArcGISEPSS 0.3%CVE-2024-8148MEDIUMBUG-000168624 - Unvalidated redirect in Portal for ArcGIS. (11.2, 11.1, 10.9.1. and 10.8.1)EPSS 0.3%CVE-2024-51954HIGHUnauthorized access to secure services in ArcGIS ServerEPSS 0.3%CVE-2026-33519CRITICALIncorrect privilege assignment in Portal for ArcGISEPSS 0.3%CVE-2026-69235MEDIUMstored cross site scripting issue in Esri Portal for ArcGISEPSS 0.3%CVE-2025-67707MEDIUMUnvalidated File Upload vulnerability in ArcGIS Server.EPSS 0.3%CVE-2026-69236MEDIUMstored cross site scripting issue in Esri Portal for ArcGISEPSS 0.3%CVE-2026-2813MEDIUMUnvalidated Redirect in ArcGIS ServerEPSS 0.3%CVE-2026-33518CRITICALIncorrect privilege assignment in Portal for ArcGISEPSS 0.3%CVE-2024-25694MEDIUMBUG-000163019 - Stored XSS in Portal for ArcGISEPSS 0.3%CVE-2024-38039MEDIUMBUG-000161683 - HTML injection vulnerability in Portal for ArcGIS.EPSS 0.3%CVE-2024-25701MEDIUMBUG-000160765 - Stored XSS in ArcGIS Experience BuilderEPSS 0.3%CVE-2026-69237LOWHTML injection vulnerability in Esri Portal for ArcGISEPSS 0.3%CVE-2024-25702MEDIUMBUG-000160599 - Stored XSS in Portal for ArcGIS Web App BuilderEPSS 0.3%