Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Priority LOW 27

There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS versions 12.1 and prior which may allow a remote, unauthenticated attacker to create a crafted link which when clicked could potentially e…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00251 Published 2026-10-26 Fixed in 12.1 CWE-79
Priority LOW 27

There is a stored cross site scripting issue in Esri ArcGIS Server 11.1 and earlier on Windows and Linux that in some configurations allows a remote unauthenticated attacker to store files that contain malicious code tha…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00251 Published 2026-10-26 Fixed in 12.1 CWE-79
Priority LOW 27

There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS versions 12.1 and prior which may allow a remote, unauthenticated attacker to create a crafted link which when clicked could potentially e…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00251 Published 2026-10-26 Fixed in 12.1 CWE-79
Priority MEDIUM 49

There is a SQL injection vulnerability in Esri ArcGIS Server versions 12.1 and earlier on Windows and Linux that may allow a remote attacker with privileges to access the service (which could, depending on the service be…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00445 Published 2026-10-26 Fixed in 12.1 CWE-89