Approved changes feed: RSS · Atom

cpe:2.3:a:esri:portal_for_arcgis:11.5:-:*:*:*:*:*:*

part: a version: 11.5 update: -

VendorEsri (7fc7b1c4-e95b-5bc9-bfb4-4695cd2e3e82)
ProductPortal For Arcgis (4a9585b9-e85b-56ed-a5e6-c7c2789574cc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-33519 vulnerable 2026-06-03 15:20:44.999398 Incorrect privilege assignment in Portal for ArcGIS
CRITICAL (9.8)
An incorrect authorization vulnerability exists in Esri Portal for ArcGIS 11.4, 11.5 and 12.0 on Windows, Linux and Kubernetes that did not correctly check permissions assigned to developer credentials.
Published: 2026-04-21T20:38:28.573Z
Updated: 2026-04-23T03:56:07.946Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-33518 vulnerable 2026-06-03 15:20:44.997359 Incorrect privilege assignment in Portal for ArcGIS
CRITICAL (9.8)
An incorrect privilege assignment vulnerability exists in Esri Portal for ArcGIS 11.5 in Windows and Linux that allows highly privileged users to create developer credentials that may grant more privileges than expected.
Published: 2026-04-21T20:37:52.198Z
Updated: 2026-04-23T03:56:06.811Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.