Login Request a demo
ES
Vendor
Esri
20 products with CVEs on record
207
CVEs
0
On KEV
9
New 30D
Products
AS
ArcGIS Server
Esri
10.0
75 CVEs0 on KEV6 new
PF
Portal for ArcGIS
Esri
9.9
91 CVEs0 on KEV3 new
AP
ArcGIS Pro
Esri
7.8
6 CVEs0 on KEV0 new
AR
Arcreader
Esri
7.8
6 CVEs0 on KEV0 new
AE
Arcgis Enterprise
Esri
8.5
5 CVEs0 on KEV0 new
AR
Arcmap
Esri
7.8
4 CVEs0 on KEV0 new
AE
Arcgis Engine
Esri
7.8
3 CVEs0 on KEV0 new
AA
Arcgis Allsource
Esri
7.3
2 CVEs0 on KEV0 new
AI
Arcgis Insights
Esri
7.5
2 CVEs0 on KEV0 new
AW
Arcinfo Workstation
Esri
–
2 CVEs0 on KEV0 new
AR
Arcsde
Esri
–
2 CVEs0 on KEV0 new
AE
Arcgis Earth
Esri
7.8
1 CVEs0 on KEV0 new
AF
Arcgis For Desktop
Esri
–
1 CVEs0 on KEV0 new
AF
Arcgis For Engine
Esri
–
1 CVEs0 on KEV0 new
AG
Arcgis Geoevent Server
Esri
7.5
1 CVEs0 on KEV0 new
AQ
Arcgis Quickcapture
Esri
6.1
1 CVEs0 on KEV0 new
AW
ArcGIS Web AppBuilder {Developer Edition)
Esri
4.7
1 CVEs0 on KEV0 new
AS
Arcgisruntime Sdk
Esri
9.8
1 CVEs0 on KEV0 new
AR
Arcpad
Esri
–
1 CVEs0 on KEV0 new
LE
Lerc
Esri
7.5
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-50096
New
AS
ArcGIS Server
Esri
6.1
0%
Oct 26BUG-000187164 - ArcGIS Server has a security vulnerability.
CVE-2026-50095
New
AS
ArcGIS Server
Esri
6.1
0%
Oct 26BUG-000187165 - ArcGIS Server has a security vulnerability.
CVE-2026-33522
New
AS
ArcGIS Server
Esri
5.3
0%
Oct 26BUG-000182936 - ArcGIS Server has a security vulnerability.
CVE-2026-33521
New
AS
ArcGIS Server
Esri
7.5
0%
Oct 26BUG-000186514 - ArcGIS Server has a security vulnerability.
CVE-2026-33520
New
AS
ArcGIS Server
Esri
6.1
0%
Oct 26BUG-000185167 - ArcGIS Server has a security vulnerability.
CVE-2026-10757
New
AS
ArcGIS Server
Esri
9.8
0%
Oct 26BUG-000187511 - ArcGIS Server has a security vulnerability.
CVE-2026-69226
PF
Portal for ArcGIS
Esri
6.5
0%
Oct 13Portal for ArcGIS has a security vulnerability
CVE-2026-10759
PF
Portal for ArcGIS
Esri
5.5
0%
Oct 13BUG-000171040 Portal for ArcGIS has a security vulnerability
CVE-2026-69227
PF
Portal for ArcGIS
Esri
9.8
0%
Oct 13BUG-000187331 Portal for ArcGIS has a security vulnerability
CVE-2026-10758
LE
Lerc
Esri
7.5
0%
Sep 25Esri Lerc has a security vulnerability
CVE-2026-69233
PF
Portal for ArcGIS
Esri
5.5
0%
Aug 21stored cross site scripting issue in Esri Portal for ArcGIS
CVE-2026-69234
PF
Portal for ArcGIS
Esri
6.1
0%
Aug 21reflected cross site scripting vulnerability in Esri Portal for ArcGIS
CVE-2026-69235
PF
Portal for ArcGIS
Esri
6.1
0%
Aug 21stored cross site scripting issue in Esri Portal for ArcGIS
CVE-2026-69236
PF
Portal for ArcGIS
Esri
6.1
0%
Aug 21stored cross site scripting issue in Esri Portal for ArcGIS
CVE-2026-69237
PF
Portal for ArcGIS
Esri
4.8
0%
Aug 21HTML injection vulnerability in Esri Portal for ArcGIS
CVE-2026-69232
PF
Portal for ArcGIS
Esri
5.5
0%
Aug 21stored cross site scripting issue in Esri Portal for ArcGIS
CVE-2026-69231
PF
Portal for ArcGIS
Esri
5.5
0%
Aug 21stored cross site scripting issue in Esri Portal for ArcGIS
CVE-2026-69230
PF
Portal for ArcGIS
Esri
4.8
0%
Aug 21stored cross site scripting issue in Esri Portal for ArcGIS
CVE-2026-69229
PF
Portal for ArcGIS
Esri
5.4
0%
Aug 21HTML injection vulnerability in Esri Portal for ArcGIS
CVE-2026-69228
PF
Portal for ArcGIS
Esri
5.3
0%
Aug 21missing authentication vulnerability in Esri Portal for ArcGIS
CVE-2026-69225
PF
Portal for ArcGIS
Esri
7.5
0%
Aug 21information disclosure vulnerability in Esri Portal for ArcGIS
CVE-2026-69238
PF
Portal for ArcGIS
Esri
4.8
0%
Aug 21HTML injection vulnerability in Esri Portal for ArcGIS
CVE-2026-69224
PF
Portal for ArcGIS
Esri
7.5
0%
Aug 21information disclosure vulnerability in Esri Portal for ArcGIS
CVE-2026-13019
PF
Portal for ArcGIS
Esri
9.8
1%
Jul 7Missing Authentication
CVE-2026-13020
PF
Portal for ArcGIS
Esri
9.8
0%
Jul 7Weak Password Recovery Mechanism in Portal for ArcGIS
CVE-2026-9181
AS
ArcGIS Server
Esri
7.5
1%
Jul 6Directory Traversal in ArcGIS Server
CVE-2026-9182
AS
ArcGIS Server
Esri
9.8
1%
Jul 6Unvalidated File Upload vulnerability in ArcGIS Server.
CVE-2026-2813
AS
ArcGIS Server
Esri
4.1
0%
May 20Unvalidated Redirect in ArcGIS Server
CVE-2026-2812
AS
ArcGIS Server
Esri
5.3
0%
May 20Improper Authentication issue in ArcGIS Server
CVE-2026-33519
PF
Portal for ArcGIS
Esri
9.8
0%
Apr 21Incorrect privilege assignment in Portal for ArcGIS
CVE-2026-33518
PF
Portal for ArcGIS
Esri
7.2
0%
Apr 21Incorrect privilege assignment in Portal for ArcGIS
CVE-2026-1446
AP
ArcGIS Pro
Esri
5.0
0%
Jan 26XSS issue is Esri ArcGIS Pro versions 3.6.0 and earlier
CVE-2025-67711
AS
ArcGIS Server
Esri
6.1
0%
Dec 31Reflected XSS vulnerability in ArcGIS Server.
CVE-2025-67710
AS
ArcGIS Server
Esri
6.1
0%
Dec 31Stored XSS vulnerability in ArcGIS Server
CVE-2025-67709
AS
ArcGIS Server
Esri
6.1
0%
Dec 31There is a cross site scripting issue in ArcGIS Server.
CVE-2025-67708
AS
ArcGIS Server
Esri
6.1
0%
Dec 31Reflected cross-site scripting (XSS) vulnerability in ArcGIS Server.
CVE-2025-67707
AS
ArcGIS Server
Esri
5.6
0%
Dec 31Unvalidated File Upload vulnerability in ArcGIS Server.
CVE-2025-67706
AS
ArcGIS Server
Esri
5.6
0%
Dec 31Unvalidated File Upload vulnerability in ArcGIS Server.
CVE-2025-67705
AS
ArcGIS Server
Esri
6.1
0%
Dec 31Reflected XSS vulnerability in ArcGIS Server.
CVE-2025-67704
AS
ArcGIS Server
Esri
6.1
0%
Dec 31Stored XSS vulnerability in ArcGIS Server.
CVE-2025-67703
AS
ArcGIS Server
Esri
6.1
0%
Dec 31Stored XSS vulnerability in ArcGIS Server.
CVE-2025-67712
AW
ArcGIS Web AppBuilder {Developer Edition)
Esri
4.7
0%
Dec 19HTML injection issue in ArcGIS Web App Builder
CVE-2025-57870
AS
ArcGIS Server
Esri
10.0
1%
Oct 22BUG-000179884 - There is a security vulnerability in ArcGIS Server Feature Services.
CVE-2025-57871
PF
Portal for ArcGIS
Esri
4.8
0%
Sep 29BUG-000174020 - Reflected XSS vulnerability identified in Portal for ArcGIS. (11.3, 11.1, 10.9.1)
CVE-2025-57872
PF
Portal for ArcGIS
Esri
6.1
0%
Sep 29BUG-000174150 - Unvalidated redirect in Portal for ArcGIS.
CVE-2025-57873
PF
Portal for ArcGIS
Esri
4.8
0%
Sep 29BUG-000175222 - Reflected XSS vulnerability in Portal for ArcGIS.
CVE-2025-57874
PF
Portal for ArcGIS
Esri
4.8
0%
Sep 29BUG-000161627 - Reflected XSS vulnerability in Portal for ArcGIS.  (11.3, 11.1, 10.9.1)
CVE-2025-57875
PF
Portal for ArcGIS
Esri
4.8
0%
Sep 29BUG-000164122 - Reflected XSS vulnerability in Portal for ArcGIS.
CVE-2025-57877
PF
Portal for ArcGIS
Esri
4.8
0%
Sep 29Reflected XSS vulnerability in Portal for ArcGIS.
CVE-2025-57878
PF
Portal for ArcGIS
Esri
6.1
0%
Sep 29BUG-000174149 - The Portal for ArcGIS has an unvalidated redirect.
CVE-2025-57879
PF
Portal for ArcGIS
Esri
6.1
0%
Sep 29BUG-000171009 - URL manipulation vulnerability in Portal for ArcGIS.
CVE-2025-57876
PF
Portal for ArcGIS
Esri
4.8
0%
Sep 29Stored XSS vulnerability in Portal for ArcGIS
CVE-2025-55107
PF
Portal For Arcgis
Esri
4.8
0%
Aug 21There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Sites versions 10.9.1 – 11.4 that may allow a remote, authenticated attacker to …
CVE-2025-55106
PF
Portal For Arcgis
Esri
4.8
0%
Aug 21There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Sites versions 10.9.1 – 11.4 that may allow a remote, authenticated attacker to inject…
CVE-2025-55105
PF
Portal For Arcgis
Esri
4.8
0%
Aug 21There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Sites versions 10.9.1 – 11.4 that may allow a remote, authenticated attacker to inject…
CVE-2025-55104
PF
Portal For Arcgis
Esri
4.8
0%
Aug 21A stored cross-site scripting (XSS) vulnerability exists ArcGIS HUB and ArcGIS Enterprise Sites which allows an authenticated user with the ability to create or edit a site to add…
CVE-2025-55103
PF
Portal For Arcgis
Esri
4.8
0%
Aug 21There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Sites versions 10.9.1 – 11.4 that may allow a remote, authenticated attacker to inject…
CVE-2025-4967
PF
Portal For Arcgis
Esri
9.1
1%
May 29Esri Portal for ArcGIS 11.4 and prior allows a remote, unauthenticated attacker to bypass the Portal’s SSRF protections
CVE-2025-2538
PF
Portal For Arcgis
Esri
9.8
1%
Mar 20A hardcoded credential vulnerability exists in a specific deployment pattern for Esri Portal for ArcGIS versions 11.4 and below that may allow a remote unauthenticated…
CVE-2024-5888
AS
Arcgis Server
Esri
4.8
0%
Mar 3There is a stored Cross-site Scripting vulnerability in ArcGIS Server for versions 11.3 and below that may allow a remote, authenticated attacker to create a stored crafted link…