AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Packages

Esri security advisories

19 advisories · 6 critical or high in 12 months · latest Oct 26

Advisories page

19 advisories

Critical 9.8Oct 26Esri ArcGIS Server: SQL injectionCVE-2026-10757fixed in 12.1High 7.5Sep 25Esri Lerc: out-of-bounds writeCVE-2026-10758no fix yetMedium 5.5Aug 21Esri Portal for ArcGIS: cross-site scriptingCVE-2026-69233no fix yetMedium 6.1Aug 21Esri Portal for ArcGIS: cross-site scriptingCVE-2026-69234no fix yetMedium 6.1Aug 21Esri Portal for ArcGIS: cross-site scriptingCVE-2026-69235no fix yetMedium 6.1Aug 21Esri Portal for ArcGIS: cross-site scriptingCVE-2026-69236no fix yetLow 3.8Aug 21Esri Portal for ArcGIS: cross-site scriptingCVE-2026-69237no fix yetLow 3.5Aug 21Esri Portal for ArcGIS: cross-site scriptingCVE-2026-69238no fix yetMedium 5.9Aug 21Esri Portal for ArcGIS: information disclosureCVE-2026-69224no fix yetMedium 5.9Aug 21Esri Portal for ArcGIS: information disclosureCVE-2026-69225no fix yetMedium 5.3Aug 21Esri Portal for ArcGIS: missing authenticationCVE-2026-69228no fix yetMedium 5.4Aug 21Esri Portal for ArcGIS: cross-site scriptingCVE-2026-69229no fix yetMedium 5.5Aug 21Esri Portal for ArcGIS: cross-site scriptingCVE-2026-69230no fix yetMedium 5.5Aug 21Esri Portal for ArcGIS: cross-site scriptingCVE-2026-69231no fix yetMedium 5.5Aug 21Esri Portal for ArcGIS: cross-site scriptingCVE-2026-69232no fix yetCritical 9.8Jul 7Esri Portal for ArcGIS: missing authenticationCVE-2026-13019fixed in 12.1High 8.1Jul 7Esri Portal for ArcGIS: weak password recoveryCVE-2026-13020fixed in 12.1Critical 9.8Jul 6Esri ArcGIS Server: path traversalCVE-2026-9181no fix yetCritical 9.8Jul 6Esri ArcGIS Server: arbitrary file uploadCVE-2026-9182no fix yet
About Esri

Security advisories Esri publishes for its own products.

trust.arcgis.com/enEsri

Esri elsewhere on Ibis: Paydays