Esri Portal for Arcgis vulnerabilities
88 published vulnerabilities in Esri Portal for Arcgis. The most were published in 2024 (23), and 17 so far in 2026.
Esri Portal for Arcgis vulnerabilities by year
2021
2022
2023
2024
2025
2026
Most exploited Esri Portal for Arcgis vulnerabilities
- CVE-2024-25693 Portal for ArcGIS has a directory traversal vulnerability.
- CVE-2026-13019 Missing Authentication
- CVE-2026-33518 Incorrect privilege assignment in Portal for ArcGIS
- CVE-2026-33519 Incorrect privilege assignment in Portal for ArcGIS
- CVE-2025-2538 BUG-000174336
- CVE-2025-4967 Server Side Request Forgery (SSRF) vulnerability in Portal for ArcGIS
- CVE-2023-25832 BUG-000148346 There is a Cross-Site Request Forgery (CSRF) vulnerability in Portal for ArcGIS.
- CVE-2021-29108 Auth bypass in Portal for ArcGIS
- CVE-2022-38205 Portal for ArcGIS has a directory traversal vulnerability (10.9.1, 10.8.1 and 10.7.1 only)
- CVE-2024-25699 Portal for ArcGIS has an invalid authentication vulnerability
- CVE-2023-25837 BUG-000133088 - ArcGIS Enterprise site builder is subject to stored XSS.
- CVE-2023-25835 BUG-000153659 ArcGIS Enterprise Sites has a stored XSS vulnerability
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.