Portal for ArcGIS vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

PF

Product

Portal for ArcGIS

by Esri · last CVE Oct 13, 2026

91

CVEs

0

On KEV

9.9

Max CVSS

3

New 30D

Vulnerabilities91 In the news0 Timeline

Severity mix

Critical 8High 16Medium 67Low 0

Severity

All severities91 Critical8 High16 Medium67 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Portal for ArcGIS to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-57873	4.8	0%	Sep 29	BUG-000175222 - Reflected XSS vulnerability in Portal for ArcGIS. Affected: 10.9.1 through 11.4
CVE-2025-57874	4.8	0%	Sep 29	BUG-000161627 - Reflected XSS vulnerability in Portal for ArcGIS. (11.3, 11.1, 10.9.1) Affected: 10.9.1 through 11.4
CVE-2025-57875	4.8	0%	Sep 29	BUG-000164122 - Reflected XSS vulnerability in Portal for ArcGIS. Affected: 10.9.1 through 11.4
CVE-2025-57877	4.8	0%	Sep 29	Reflected XSS vulnerability in Portal for ArcGIS. Affected: 10.9.1 through 11.4
CVE-2025-57876	4.8	0%	Sep 29	Stored XSS vulnerability in Portal for ArcGIS Affected: 10.9.1 through 11.4
CVE-2025-55107	4.8	0%	Aug 21	BUG-000177335 ArcGIS Enterprise Sites has a stored Cross-site Scripting vulnerability. Affected: 10.9.1 through 11.4
CVE-2025-55106	4.8	0%	Aug 21	BUG-000173171 ArcGIS Enterprise Sites has a Cross-site Scripting vulnerability. Affected: 10.9.1 through 11.4
CVE-2025-55105	4.8	0%	Aug 21	BUG-000177336 - ArcGIS Enterprise Sites has a stored Cross-site Scripting vulnerability. Affected: 10.9.1 through 11.4
CVE-2025-55104	4.8	0%	Aug 21	BUG-000173918 - ArcGIS Enterprise Sites has a security vulnerability. Affected: 10.9.1 through 11.4
CVE-2025-55103	4.8	0%	Aug 21	BUG-000177333 - ArcGIS Enterprise Sites has a stored Cross-site Scripting vulnerability. Affected: 10.9.1; 11.1; 11.2; 11.4
CVE-2024-25694	4.8	0%	Oct 4	BUG-000163019 - Stored XSS in Portal for ArcGIS Affected: 10.8.1 through 10.9.1
CVE-2024-25701	4.8	0%	Oct 4	BUG-000160765 - Stored XSS in ArcGIS Experience Builder Affected: 10.8.1 through 11.1
CVE-2024-25702	4.8	0%	Oct 4	BUG-000160599 - Stored XSS in Portal for ArcGIS Web App Builder Affected: 10.8.1 through 11.1
CVE-2024-25707	4.8	0%	Oct 4	BUG-000160241 - Reflected XSS in Portal for ArcGIS Affected: all through 11.1
CVE-2024-25696	4.8	0%	Apr 4	There is a Cross-site Scripting vulnerability in Portal for ArcGIS in versions 11.0 and below that may allow a remote, authenticated attacker to create a crafted link which when… Affected: through 11.0
CVE-2024-25690	4.7	0%	Apr 4	There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.1 and below that may allow a remote, unauthenticated attacker to create a crafted link which when… Affected: through 11.1
CVE-2024-8149	4.6	0%	Oct 4	BUG-000168624 - Unvalidated redirect in Portal for ArcGIS. Affected: 11.1; 11.2