Esri
9 known vulnerabilities
Top Products
A Weak Password Recovery Mechanism for Forgotten Password exists in Esri Portal for ArcGIS versions 12.1 and earlier on
Esri Portal for ArcGIS versions 12.1 and earlier on Windows, Linux and Kubernetes have a missing authentication for crit
Esri ArcGIS Server contains an unrestricted file upload vulnerability. An unauthenticated attacker could exploit this is
Esri ArcGIS Server contains a directory traversal vulnerability. ArcGIS Enterprise on Kubernetes is not impacted. An una
ArcGIS Server contains an input validation weakness in the login redirection workflow. An Authenticated attacker could e
ArcGIS Server contains an improper authentication vulnerability in an undocumented administrative endpoint. An unauthent
An incorrect authorization vulnerability exists in Esri Portal for ArcGIS 11.4, 11.5 and 12.0 on Windows, Linux and Kube
An incorrect privilege assignment vulnerability exists in Esri Portal for ArcGIS 11.5 in Windows and Linux that allows h
There is a Cross‑Site Scripting (XSS) issue in Esri ArcGIS Pro versions 3.6.0 and earlier. ArcGIS Pro is a desktop appli
Frequently Asked Questions
How many CVEs affect Esri?
Esri has 9 CVE records in our database, including 5 critical and 1 high severity vulnerabilities.
What are the most severe Esri vulnerabilities?
Esri has 5 critical severity (CVSS 9.0+) and 1 high severity (CVSS 7.0-8.9) vulnerabilities. Review the list above sorted by publication date to find the most recent high-severity issues.
How can I scan for Esri vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Esri products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Esri Vulnerabilities
CyberStrike scans your infrastructure for Esri vulnerabilities and provides real-time remediation guidance.
Get Started