Portal for arcgis

This hub aggregates every CVE we track for Portal for arcgis, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Portal for arcgis.

• CVE-2026-33519Incorrect privilege assignment in Portal for ArcGIS9.8Apr 21, 2026
• CVE-2026-33518Incorrect privilege assignment in Portal for ArcGIS9.8Apr 21, 2026
• CVE-2025-57871BUG-000174020 - Reflected XSS vulnerability identified in Portal for ArcGIS. (11.3, 11.1, 10.9.1)4.8Sep 29, 2025
• CVE-2025-57872BUG-000174150 - Unvalidated redirect in Portal for ArcGIS.6.1Sep 29, 2025
• CVE-2025-57873BUG-000175222 - Reflected XSS vulnerability in Portal for ArcGIS.4.8Sep 29, 2025
• CVE-2025-57874BUG-000161627 - Reflected XSS vulnerability in Portal for ArcGIS.  (11.3, 11.1, 10.9.1)4.8Sep 29, 2025
• CVE-2025-57875BUG-000164122 - Reflected XSS vulnerability in Portal for ArcGIS.4.8Sep 29, 2025
• CVE-2025-57877Reflected XSS vulnerability in Portal for ArcGIS.4.8Sep 29, 2025
• CVE-2025-57878BUG-000174149 - The Portal for ArcGIS has an unvalidated redirect.6.1Sep 29, 2025
• CVE-2025-57879BUG-000171009 - URL manipulation vulnerability in Portal for ArcGIS.6.1Sep 29, 2025
• CVE-2025-57876Stored XSS vulnerability in Portal for ArcGIS4.8Sep 29, 2025
• CVE-2025-55107BUG-000177335 ArcGIS Enterprise Sites has a stored Cross-site Scripting vulnerability.4.8Aug 21, 2025
• CVE-2025-55106BUG-000173171 ArcGIS Enterprise Sites has a Cross-site Scripting vulnerability.4.8Aug 21, 2025
• CVE-2025-55105BUG-000177336 - ArcGIS Enterprise Sites has a stored Cross-site Scripting vulnerability.4.8Aug 21, 2025
• CVE-2025-55104BUG-000173918 - ArcGIS Enterprise Sites has a security vulnerability.4.8Aug 21, 2025