psirt@esri.com
organization01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS psirt@esri.com
03
assessed vulnerabilities (177)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-50096US | medium6.1 | — | ||
There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS versions 12.1 and prior which may allow a remote, unauthenticated attacker to create a crafted lin… | ||||
| CVE-2026-50095US | medium6.1 | — | ||
There is a stored cross site scripting issue in Esri ArcGIS Server 11.1 and earlier on Windows and Linux that in some configurations allows a remote unauthenticated attacker to sto… | ||||
| CVE-2026-33522US | medium5.3 | — | ||
Esri ArcGIS Server versions 11.3 to 12.0 ONLY allows a remote, unauthenticated attacker to update service metadata. A patch is provided for ArcGIS Server software in General Availa… | ||||
| CVE-2026-33521US | high7.5 | — | ||
There is s denial of service vulnerability in Esri ArcGIS Server versions 12.0 and prior that may allow a remote, unauthenticated attacker to supply crafted requests that may, unde… | ||||
| CVE-2026-33520US | medium6.1 | — | ||
There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS versions 12.1 and prior which may allow a remote, unauthenticated attacker to create a crafted lin… | ||||
| CVE-2026-10757US | critical9.8 | — | ||
There is a SQL injection vulnerability in Esri ArcGIS Server versions 12.1 and earlier on Windows and Linux that may allow a remote attacker with privileges to access the service (… | ||||
| CVE-2026-69227US | critical9.8OT elevated | — | ||
A flaw in Portal for ArcGIS allows unauthenticated access to
certain Portal Administrator API endpoints under specific conditions. This could enable an attacker to access adminis… | ||||
| CVE-2026-69226US | medium6.5OT elevated | — | ||
A flaw in Portal for ArcGIS allows unauthenticated users to create new accounts through the sharing endpoint even when self-service account registration is disabled (disableSignup=… | ||||
| CVE-2026-10759US | medium5.5 | — | ||
A flaw in Portal for ArcGIS could allow LDAP injection through administrative functionality that constructs Active Directory or LDAP search queries without sufficient input neutral… | ||||
| CVE-2026-10758US | high7.5 | — | ||
Esri LERC is an open-source image or raster format which supports rapid encoding and decoding for any pixel type. A Heap based Out-of-Bounds Write via Integer Overflow in LERC vers… | ||||
| CVE-2026-69238US | medium4.8 | — | ||
There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.5 and prior that allows a remote, highly priviliged attacker to insert arbitrary HTML into the Portal… | ||||
| CVE-2026-69237US | medium4.8 | — | ||
There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.3 and prior that allows a remote attacker with administrative privileges to insert arbitrary HTML int… | ||||
| CVE-2026-69236US | medium6.1 | — | ||
There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 12.1 and prior that may allow a remote, privileged attacker to inject malicious code that could pote… | ||||
| CVE-2026-69235US | medium6.1 | — | ||
There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, privileged attacker to inject malicious code that could pote… | ||||
| CVE-2026-69234US | medium6.1 | — | ||
There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS versions 11.5 and prior which may allow a remote, unauthenticated attacker to create a crafted lin… | ||||
| CVE-2026-69233US | medium5.5 | — | ||
There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, administratively privileged attacker to inject malicious cod… | ||||
| CVE-2026-69232US | medium5.5 | — | ||
There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, privileged attacker to inject malicious code that could pote… | ||||
| CVE-2026-69231US | medium5.5 | — | ||
There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, privileged attacker to inject malicious code that could pote… | ||||
| CVE-2026-69230US | medium4.8 | — | ||
There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, administratively privileged attacker to inject malicious cod… | ||||
| CVE-2026-69229US | medium5.4 | — | ||
There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 12.0 and prior that allows a remote, authenticated attacker to insert arbitrary HTML into the Portal for… | ||||