Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how esri compares to other vendors in security performance

View Risk Score →

Esri Portal for ArcGISMissing Authentication

Risk 86
Severity
9.8
First published (updated )
CVE-2026-13019

Esri Portal for ArcGISWeak Password Recovery Mechanism in Portal for ArcGIS

Risk 86
Severity
9.8
First published (updated )
CVE-2026-13020

Esri ArcGIS ServerDirectory Traversal in ArcGIS Server

Risk 61
Severity
9.8
EPSS
0.94%
First published (updated )
CVE-2026-9181

Esri ArcGIS ServerUnvalidated File Upload vulnerability in ArcGIS Server.

Risk 61
Severity
9.8
EPSS
0.35%
First published (updated )
CVE-2026-9182

Esri ArcGIS ServerUnvalidated Redirect in ArcGIS Server

Risk 24
Severity
4.7
First published (updated )
CVE-2026-2813
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Esri ArcGIS ServerImproper Authentication issue in ArcGIS Server

Risk 27
Severity
5.3
First published (updated )
CVE-2026-2812

Esri Portal for ArcGISIncorrect privilege assignment in Portal for ArcGIS

Risk 86
Severity
9.8
First published (updated )
CVE-2026-33519

Esri Portal for ArcGISIncorrect privilege assignment in Portal for ArcGIS

Risk 86
Severity
9.8
First published (updated )
CVE-2026-33518

Esri ArcGIS ProXSS issue is Esri ArcGIS Pro versions 3.6.0 and earlier

Risk 31
Severity
5
First published (updated )
CVE-2026-1446

Esri ArcGIS ServerReflected XSS vulnerability in ArcGIS Server.

Risk 38
Severity
6.1
First published (updated )
CVE-2025-67711
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Esri ArcGIS ServerStored XSS vulnerability in ArcGIS Server

Risk 38
Severity
6.1
First published (updated )
CVE-2025-67710

Esri ArcGIS ServerThere is a cross site scripting issue in ArcGIS Server.

Risk 38
Severity
6.1
First published (updated )
CVE-2025-67709

Esri ArcGIS ServerReflected cross-site scripting (XSS) vulnerability in ArcGIS Server.

Risk 38
Severity
6.1
First published (updated )
CVE-2025-67708

Esri ArcGIS ServerUnvalidated File Upload vulnerability in ArcGIS Server.

Risk 48
Severity
7.3
First published (updated )
CVE-2025-67707

Esri ArcGIS ServerUnvalidated File Upload vulnerability in ArcGIS Server.

Risk 48
Severity
7.3
First published (updated )
CVE-2025-67706
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Esri ArcGIS ServerReflected XSS vulnerability in ArcGIS Server.

Risk 38
Severity
6.1
First published (updated )
CVE-2025-67705

Esri ArcGIS ServerStored XSS vulnerability in ArcGIS Server.

Risk 38
Severity
6.1
First published (updated )
CVE-2025-67704

Esri ArcGIS ServerStored XSS vulnerability in ArcGIS Server.

Risk 38
Severity
6.1
First published (updated )
CVE-2025-67703

Esri ArcGIS Web AppBuilderHTML injection issue in ArcGIS Web App Builder

Risk 24
Severity
4.7
First published (updated )
CVE-2025-67712

Esri ArcGIS ServerBUG-000179884 - There is a security vulnerability in ArcGIS Server Feature Services.

Risk 87
Severity
10
First published (updated )
CVE-2025-57870
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

BleepingComputerChinese hackers abuse geo-mapping tool for year-long persistence

First published (updated )
News
BleepingComputer

Esri Portal for ArcGISBUG-000174020 - Reflected XSS vulnerability identified in Portal for ArcGIS. (11.3, 11.1, 10.9.1)

Risk 29
Severity
4.8
First published (updated )
CVE-2025-57871

Esri Portal for ArcGISBUG-000174150 - Unvalidated redirect in Portal for ArcGIS.

Risk 38
Severity
6.1
First published (updated )
CVE-2025-57872

Esri Portal for ArcGISBUG-000175222 - Reflected XSS vulnerability in Portal for ArcGIS.

Risk 29
Severity
4.8
First published (updated )
CVE-2025-57873

Esri Portal for ArcGISBUG-000161627 - Reflected XSS vulnerability in Portal for ArcGIS.  (11.3, 11.1, 10.9.1)

Risk 29
Severity
4.8
First published (updated )
CVE-2025-57874
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Esri Portal for ArcGISBUG-000164122 - Reflected XSS vulnerability in Portal for ArcGIS.

Risk 29
Severity
4.8
First published (updated )
CVE-2025-57875

Esri Portal for ArcGISReflected XSS vulnerability in Portal for ArcGIS.

Risk 29
Severity
4.8
First published (updated )
CVE-2025-57877

Esri Portal for ArcGISBUG-000174149 - The Portal for ArcGIS has an unvalidated redirect.

Risk 38
Severity
6.1
First published (updated )
CVE-2025-57878

Esri Portal for ArcGISBUG-000171009 - URL manipulation vulnerability in Portal for ArcGIS.

Risk 38
Severity
6.1
First published (updated )
CVE-2025-57879

Esri Portal for ArcGISStored XSS vulnerability in Portal for ArcGIS

Risk 29
Severity
4.8
First published (updated )
CVE-2025-57876
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203