AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Companies

Esri security advisories

19 advisories across Esri

Company profile
Critical 9.8Oct 26Esri ArcGIS Server: SQL injectionCVE-2026-10757fixed in 12.1High 7.5Sep 25Esri Lerc: out-of-bounds writeCVE-2026-10758no fix yetMedium 5.5Aug 21Esri Portal for ArcGIS: cross-site scriptingCVE-2026-69233no fix yetMedium 6.1Aug 21Esri Portal for ArcGIS: cross-site scriptingCVE-2026-69234no fix yetMedium 6.1Aug 21Esri Portal for ArcGIS: cross-site scriptingCVE-2026-69235no fix yetMedium 6.1Aug 21Esri Portal for ArcGIS: cross-site scriptingCVE-2026-69236no fix yetLow 3.8Aug 21Esri Portal for ArcGIS: cross-site scriptingCVE-2026-69237no fix yetLow 3.5Aug 21Esri Portal for ArcGIS: cross-site scriptingCVE-2026-69238no fix yetMedium 5.9Aug 21Esri Portal for ArcGIS: information disclosureCVE-2026-69224no fix yetMedium 5.9Aug 21Esri Portal for ArcGIS: information disclosureCVE-2026-69225no fix yetMedium 5.3Aug 21Esri Portal for ArcGIS: missing authenticationCVE-2026-69228no fix yetMedium 5.4Aug 21Esri Portal for ArcGIS: cross-site scriptingCVE-2026-69229no fix yetMedium 5.5Aug 21Esri Portal for ArcGIS: cross-site scriptingCVE-2026-69230no fix yetMedium 5.5Aug 21Esri Portal for ArcGIS: cross-site scriptingCVE-2026-69231no fix yetMedium 5.5Aug 21Esri Portal for ArcGIS: cross-site scriptingCVE-2026-69232no fix yetCritical 9.8Jul 7Esri Portal for ArcGIS: missing authenticationCVE-2026-13019fixed in 12.1High 8.1Jul 7Esri Portal for ArcGIS: weak password recoveryCVE-2026-13020fixed in 12.1Critical 9.8Jul 6Esri ArcGIS Server: path traversalCVE-2026-9181no fix yetCritical 9.8Jul 6Esri ArcGIS Server: arbitrary file uploadCVE-2026-9182no fix yet
About Esri

Environmental Systems Research Institute, Inc., doing business as Esri, is an American geographic information system (GIS) software company headquartered in Redlands, California. It is best known for its ArcGIS products.

Elsewhere on Ibis: Paydays