Login Request a demo
PF
Product
Portal for ArcGIS
by Esri · last CVE Oct 13, 2026
91
CVEs
0
On KEV
9.9
Max CVSS
3
New 30D
Vulnerabilities91In the news0Timeline
Severity mix
Critical 8High 16Medium 67Low 0
Severity
All severities91Critical8High16Medium67Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Portal for ArcGIS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-25693
9.9
1%
Apr 4
There is a path traversal in Esri Portal for ArcGIS versions <= 11.2
Affected: through 11.2
CVE-2026-69227
9.8
0%
Oct 13
BUG-000187331 Portal for ArcGIS has a security vulnerability
Affected: 11.1 through 12.1
CVE-2026-13019
9.8
1%
Jul 7
Missing Authentication
Affected: before 12.1
CVE-2026-13020
9.8
0%
Jul 7
Weak Password Recovery Mechanism in Portal for ArcGIS
Affected: before 12.1
CVE-2026-33519
9.8
0%
Apr 21
Incorrect privilege assignment in Portal for ArcGIS
Affected: 11.4; 11.5; 12.0
CVE-2025-2538
9.8
1%
Mar 20
A hardcoded credential vulnerability exists in a specific deployment pattern for Esri Portal for ArcGIS versions 11.4 and below that may allow a remote unauthenticated…
Affected: through 11.4
CVE-2022-38193
9.6
1%
Aug 16
There is a code injection vulnerability in Esri Portal for ArcGIS versions 10.8.1 and below that may allow a remote, unauthenticated attacker to pass strings which could…
Affected: through 10.8.1
CVE-2025-4967
9.1
1%
May 29
Esri Portal for ArcGIS 11.4 and prior allows a remote, unauthenticated attacker to bypass the Portal’s SSRF protections
Affected: through 11.4
Showing 8