Vulnerabilities in Esri

167 results
Vexday analysis

Com 150 CVEs catalogadas, o portfólio da Esri apresenta uma taxa de exploração ativa abaixo da média geral do catálogo KEV, sem nenhuma vulnerabilidade confirmada em uso por agentes de ameaça no momento. O tipo de falha mais recorrente é CWE-79 (Cross-Site Scripting), o que indica exposição persistente a vetores de injeção de scripts em interfaces web. A CVE mais perigosa ativa no momento, CVE-2021-29097, registra um EPSS de 0,0241, sugerindo probabilidade relativamente baixa de exploração em curto prazo, embora as 7 vulnerabilidades de severidade crítica no total mereçam atenção contínua de equipes de gestão de patch. A ausência de PoCs públicas conhecidas reduz a superfície de risco imediato, mas não elimina a necessidade de monitoramento, especialmente diante das 4 CVEs registradas nos últimos 90 dias.

CVE-2024-51947MEDIUMStored XSS vulnerability in Rest Services under Layer nameEPSS 0.3%CVE-2024-51950MEDIUMStored XSS in Server Admin under Services > lifecycleinfosEPSS 0.3%CVE-2024-51949MEDIUMStored XSS vulnerability in Rest Services under OGCFeature Service and Map ServiceEPSS 0.3%CVE-2024-51960MEDIUMStored XSS in ArcGIS Server Administrator DirectoryEPSS 0.3%CVE-2024-51942MEDIUMStored XSS vulnerability in Rest Admin API under Hosted Feature Services pageEPSS 0.3%CVE-2024-51956MEDIUMStored XSS vulnerability in ArcGIS Server Administrator DirectoryEPSS 0.3%CVE-2024-51946MEDIUMStored XSS in Rest Services Directory under Identify operationEPSS 0.3%CVE-2024-51963MEDIUMStored XSS in ArcGIS Server ManagerEPSS 0.3%CVE-2024-51957MEDIUMStored XSS vulnerability in ArcGIS Rest Services DirectoryEPSS 0.3%CVE-2024-10904MEDIUMStored XSS in Server Admin APIEPSS 0.3%CVE-2026-69233MEDIUMstored cross site scripting issue in Esri Portal for ArcGISEPSS 0.2%CVE-2025-57879MEDIUMBUG-000171009 - URL manipulation vulnerability in Portal for ArcGIS.EPSS 0.2%CVE-2025-57878MEDIUMBUG-000174149 - The Portal for ArcGIS has an unvalidated redirect.EPSS 0.2%CVE-2025-57872MEDIUMBUG-000174150 - Unvalidated redirect in Portal for ArcGIS.EPSS 0.2%CVE-2025-67704MEDIUMStored XSS vulnerability in ArcGIS Server.EPSS 0.2%CVE-2026-69232MEDIUMstored cross site scripting issue in Esri Portal for ArcGISEPSS 0.2%CVE-2026-69231MEDIUMstored cross site scripting issue in Esri Portal for ArcGISEPSS 0.2%CVE-2026-69234MEDIUMreflected cross site scripting vulnerability in Esri Portal for ArcGISEPSS 0.2%CVE-2025-67710MEDIUMStored XSS vulnerability in ArcGIS ServerEPSS 0.2%CVE-2025-67705MEDIUMReflected XSS vulnerability in ArcGIS Server.EPSS 0.2%