DeutschShown in its original language — a full translation is planned for a future version.
ESRI Portal für ArcGIS: Mehrere Schwachstellen
view advisory published 2026-08-23
Ein Angreifer kann mehrere Schwachstellen in ESRI Portal für ArcGIS ausnutzen, um Cross-Site-Scripting- und HTML-Injection-Angriffe durchzuführen, die Authentifizierung zu umgehen oder vertrauliche Informationen offenzulegen.
01
describes (13)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-69238US | medium4.8 | — | ||
There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.5 and prior that allows a remote, highly priviliged attacker to insert arbitrary HTML into the Portal… | ||||
| CVE-2026-69237US | medium4.8 | — | ||
There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.3 and prior that allows a remote attacker with administrative privileges to insert arbitrary HTML int… | ||||
| CVE-2026-69236US | medium6.1 | — | ||
There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 12.1 and prior that may allow a remote, privileged attacker to inject malicious code that could pote… | ||||
| CVE-2026-69235US | medium6.1 | — | ||
There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, privileged attacker to inject malicious code that could pote… | ||||
| CVE-2026-69234US | medium6.1 | — | ||
There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS versions 11.5 and prior which may allow a remote, unauthenticated attacker to create a crafted lin… | ||||
| CVE-2026-69233US | medium5.5 | — | ||
There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, administratively privileged attacker to inject malicious cod… | ||||
| CVE-2026-69232US | medium5.5 | — | ||
There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, privileged attacker to inject malicious code that could pote… | ||||
| CVE-2026-69231US | medium5.5 | — | ||
There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, privileged attacker to inject malicious code that could pote… | ||||
| CVE-2026-69230US | medium4.8 | — | ||
There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, administratively privileged attacker to inject malicious cod… | ||||
| CVE-2026-69229US | medium5.4 | — | ||
There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 12.0 and prior that allows a remote, authenticated attacker to insert arbitrary HTML into the Portal for… | ||||
| CVE-2026-69228US | medium5.3OT elevated | — | ||
There is a missing authentication vulnerability in Esri Portal for ArcGIS versions 12.0 and prior that may allow a remote, unauthenticated attacker to access a specific resource (n… | ||||
| CVE-2026-69225US | high7.5 | — | ||
There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 11.5 through 12.0 and earlier that may allow a remote, unauthenticated attacker to reflect sensi… | ||||
| CVE-2026-69224US | high7.5 | — | ||
There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 12.0 and earlier that may under difficult to reproduce circumstances allow a remote, unauthentic… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan