Esri
Security Risk Profile
64
/100
highSecurity Risk Score
Comprehensive risk assessment based on 199 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from May 2, 2005 to present
199
Total CVEs
77
Critical+High
0
Exploited
67
Unpatched
Threat Assessment
Avg CVSS
6.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
67
Critical/High
Risk Level
64/100
high
🆕 24Fresh (<7d)📈 24 in Last 30 Days
Severity Distribution
Critical
18High
59Medium
115Low
4Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
5Age Distribution
Common Weaknesses (CWE)
1
XSS
94
2
Path Traversal
9
3
SQL Injection
9
4
SSRF
7
5
Buffer Overflow
6
Most Affected Products
1. Esri Portal for ArcGIS298
2. Esri ArcGIS Server112
3. Esri ArcReader33
4. Esri ArcGIS22
5. Esri ArcGIS Pro11
Recent Vulnerabilities
See more →CVE-2026-13019
CVSS 9.8critical
Missing Authentication
7/7/2026🔧 No Patch
CVE-2026-13020
CVSS 9.8critical
Weak Password Recovery Mechanism in Portal for ArcGIS
7/7/2026🔧 No Patch
CVE-2026-9181
CVSS 9.8EPSS 1%critical
Directory Traversal in ArcGIS Server
7/6/2026🔧 No Patch
CVE-2026-9182
CVSS 9.8EPSS 0%critical
Unvalidated File Upload vulnerability in ArcGIS Server.
7/6/2026🔧 No Patch
CVE-2026-2813
CVSS 4.7medium
Unvalidated Redirect in ArcGIS Server
5/20/2026🔧 No Patch
CVE-2026-2812
CVSS 5.3medium
Improper Authentication issue in ArcGIS Server
5/20/2026🔧 No Patch
CVE-2026-33519
CVSS 9.8critical
Incorrect privilege assignment in Portal for ArcGIS
4/21/2026🔧 No Patch
CVE-2026-33518
CVSS 9.8critical
Incorrect privilege assignment in Portal for ArcGIS
4/21/2026🔧 No Patch
CVE-2026-1446
CVSS 5.0medium
XSS issue is Esri ArcGIS Pro versions 3.6.0 and earlier
1/26/2026
CVE-2025-67711
CVSS 6.1medium
Reflected XSS vulnerability in ArcGIS Server.
12/31/2025
Monitor Esri in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.