Portal For Arcgis
Approved changes feed: RSS · Atom
cpe:2.3:a:esri:portal_for_arcgis:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Esri (7fc7b1c4-e95b-5bc9-bfb4-4695cd2e3e82) |
|---|---|
| Product | Portal For Arcgis (4a9585b9-e85b-56ed-a5e6-c7c2789574cc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-13020 |
vulnerable | 2026-07-29 00:23:32.759435 |
Weak Password Recovery Mechanism in Portal for ArcGIS
HIGH (8.1)
A Weak Password Recovery Mechanism for Forgotten Password exists in Esri Portal for ArcGIS versions 12.1 and earlier on Windows, Linux and Kubernetes. A remote, unauthorized attacker may assume ownership of a user’s account by manipulating this mechanism. ArcGIS Administrators should configure an email server with ArcGIS Enterprise to facilitate user self-service password recovery. The ability for an administrator to reset a user’s password remains unchanged.
Published: 2026-07-07T16:39:16.329Z
Updated: 2026-07-08T03:56:45.810Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-13019 |
vulnerable | 2026-07-29 00:23:32.759244 |
Missing Authentication
CRITICAL (9.8)
Esri Portal for ArcGIS versions 12.1 and earlier on Windows, Linux and Kubernetes have a missing authentication for critical function vulnerability allows a remote, unauthenticated attacker to access an unprotected API.
Published: 2026-07-07T16:40:53.066Z
Updated: 2026-07-08T03:56:44.996Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-33519 |
vulnerable | 2026-06-08 07:59:10.255723 |
Incorrect privilege assignment in Portal for ArcGIS
CRITICAL (9.8)
An incorrect authorization vulnerability exists in Esri Portal for ArcGIS 11.4, 11.5 and 12.0 on Windows, Linux and Kubernetes that did not correctly check permissions assigned to developer credentials.
Published: 2026-04-21T20:38:28.573Z
Updated: 2026-04-23T03:56:07.946Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-33518 |
vulnerable | 2026-06-08 07:59:10.252738 |
Incorrect privilege assignment in Portal for ArcGIS
CRITICAL (9.8)
An incorrect privilege assignment vulnerability exists in Esri Portal for ArcGIS 11.5 in Windows and Linux that allows highly privileged users to create developer credentials that may grant more privileges than expected.
Published: 2026-04-21T20:37:52.198Z
Updated: 2026-04-23T03:56:06.811Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-57879 |
vulnerable | 2026-06-08 07:33:16.282556 |
BUG-000171009 - URL manipulation vulnerability in Portal for ArcGIS.
MEDIUM (6.1)
There is an unvalidated redirect vulnerability in Esri Portal for ArcGIS 11.4 and below that may allow a remote, unauthenticated attacker to craft a URL that could redirect a victim to an arbitrary website, simplifying phishing attacks.
Published: 2025-09-29T18:33:06.669Z
Updated: 2025-09-29T19:52:42.354Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-57878 |
vulnerable | 2026-06-08 07:33:16.277018 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-57877 |
vulnerable | 2026-06-08 07:33:16.275484 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-57876 |
vulnerable | 2026-06-08 07:33:16.274215 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-57875 |
vulnerable | 2026-06-08 07:33:16.272702 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-57874 |
vulnerable | 2026-06-08 07:33:16.270840 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-57873 |
vulnerable | 2026-06-08 07:33:16.269365 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-57872 |
vulnerable | 2026-06-08 07:33:16.268147 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-57871 |
vulnerable | 2026-06-08 07:33:16.252441 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55107 |
vulnerable | 2026-06-08 07:33:14.077088 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55106 |
vulnerable | 2026-06-08 07:33:14.076686 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55105 |
vulnerable | 2026-06-08 07:33:14.076225 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55104 |
vulnerable | 2026-06-08 07:33:14.075072 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4967 |
vulnerable | 2026-06-08 07:29:17.602893 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2538 |
vulnerable | 2026-06-08 07:16:57.378298 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8149 |
vulnerable | 2026-06-08 07:00:22.752316 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8148 |
vulnerable | 2026-06-08 07:00:22.744420 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38040 |
vulnerable | 2026-06-08 06:39:49.047861 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38039 |
vulnerable | 2026-06-08 06:39:49.043934 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38038 |
vulnerable | 2026-06-08 06:39:49.043175 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38037 |
vulnerable | 2026-06-08 06:39:49.041371 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25709 |
vulnerable | 2026-06-08 06:31:23.766599 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25707 |
vulnerable | 2026-06-08 06:31:23.755006 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25706 |
vulnerable | 2026-06-08 06:31:23.754440 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25705 |
vulnerable | 2026-06-08 06:31:23.753787 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25702 |
vulnerable | 2026-06-08 06:31:23.753273 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25701 |
vulnerable | 2026-06-08 06:31:23.752731 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25699 |
vulnerable | 2026-06-08 06:31:23.745073 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25698 |
vulnerable | 2026-06-08 06:31:23.744487 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25697 |
vulnerable | 2026-06-08 06:31:23.739679 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25696 |
vulnerable | 2026-06-08 06:31:23.739238 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25695 |
vulnerable | 2026-06-08 06:31:23.737081 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25694 |
vulnerable | 2026-06-08 06:31:23.736431 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25693 |
vulnerable | 2026-06-08 06:31:23.731353 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25692 |
vulnerable | 2026-06-08 06:31:23.730750 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25691 |
vulnerable | 2026-06-08 06:31:23.726341 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25690 |
vulnerable | 2026-06-08 06:31:23.723304 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25837 |
vulnerable | 2026-06-08 05:56:10.695454 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25836 |
vulnerable | 2026-06-08 05:56:10.695035 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25835 |
vulnerable | 2026-06-08 05:56:10.694577 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25834 |
vulnerable | 2026-06-08 05:56:10.692311 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25833 |
vulnerable | 2026-06-08 05:56:10.691975 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25832 |
vulnerable | 2026-06-08 05:56:10.691691 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25831 |
vulnerable | 2026-06-08 05:56:10.691341 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25830 |
vulnerable | 2026-06-08 05:56:10.689103 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25829 |
vulnerable | 2026-06-08 05:56:10.687007 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38212 |
vulnerable | 2026-06-08 05:47:16.041593 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38211 |
vulnerable | 2026-06-08 05:47:16.040972 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38210 |
vulnerable | 2026-06-08 05:47:16.040618 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38209 |
vulnerable | 2026-06-08 05:47:16.040267 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38208 |
vulnerable | 2026-06-08 05:47:16.039831 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38206 |
vulnerable | 2026-06-08 05:47:16.038720 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38205 |
vulnerable | 2026-06-08 05:47:16.038145 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38203 |
vulnerable | 2026-06-08 05:47:16.035126 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38194 |
vulnerable | 2026-06-08 05:47:16.020948 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38193 |
vulnerable | 2026-06-08 05:47:16.020435 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38192 |
vulnerable | 2026-06-08 05:47:16.020014 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38191 |
vulnerable | 2026-06-08 05:47:16.019577 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38190 |
vulnerable | 2026-06-08 05:47:16.019098 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38189 |
vulnerable | 2026-06-08 05:47:16.016841 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38188 |
vulnerable | 2026-06-08 05:47:16.016411 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38187 |
vulnerable | 2026-06-08 05:47:16.015967 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38186 |
vulnerable | 2026-06-08 05:47:16.015407 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38184 |
vulnerable | 2026-06-08 05:47:16.014882 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29110 |
vulnerable | 2026-06-08 05:31:25.864283 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29109 |
vulnerable | 2026-06-08 05:31:25.863710 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29108 |
vulnerable | 2026-06-08 05:31:25.863066 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.