AE
Product
Arcgis Enterprise
5
CVEs
0
On KEV
8.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 4Low 0
Watch
Add Arcgis Enterprise to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-25699 | 8.5 | Apr 4 | There is a difficult‑to‑exploit improper authentication issue in the Home application for Esri Portal for ArcGIS versions 11.2 and below on Windows and Linux, and ArcGIS… Affected: through 11.1 |
| CVE-2021-3012 | 5.4 | Apr 8 | A cross-site scripting (XSS) vulnerability in the Document Link of documents in ESRI Enterprise before 10.9 allows remote authenticated users to inject arbitrary JavaScript code… Affected: before 10.9 |
| CVE-2019-16193 | 5.4 | Sep 11 | In ArcGIS Enterprise 10.6.1, a crafted IFRAME element can be used to trigger a Cross Frame Scripting (XFS) attack through the EDIT MY PROFILE feature Affected: 10.6.1 |
| CVE-2021-29115 | 5.3 | Dec 7 | An information disclosure vulnerability in the ArcGIS Service Directory in Esri ArcGIS Enterprise versions 10.9.0 and below may allows a remote attacker to view hidden field names… Affected: through 10.9 |
| CVE-2024-25708 | 4.8 | Apr 4 | There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Web App Builder versions 10.9.1 and below that may allow a remote, authenticated attacker… Affected: 10.8.1; 10.9.1 |
Showing 5