Vulnerabilities in Esri

167 results
Vexday analysis

Com 150 CVEs catalogadas, o portfólio da Esri apresenta uma taxa de exploração ativa abaixo da média geral do catálogo KEV, sem nenhuma vulnerabilidade confirmada em uso por agentes de ameaça no momento. O tipo de falha mais recorrente é CWE-79 (Cross-Site Scripting), o que indica exposição persistente a vetores de injeção de scripts em interfaces web. A CVE mais perigosa ativa no momento, CVE-2021-29097, registra um EPSS de 0,0241, sugerindo probabilidade relativamente baixa de exploração em curto prazo, embora as 7 vulnerabilidades de severidade crítica no total mereçam atenção contínua de equipes de gestão de patch. A ausência de PoCs públicas conhecidas reduz a superfície de risco imediato, mas não elimina a necessidade de monitoramento, especialmente diante das 4 CVEs registradas nos últimos 90 dias.

CVE-2025-67703MEDIUMStored XSS vulnerability in ArcGIS Server.EPSS 0.2%CVE-2025-67711MEDIUMReflected XSS vulnerability in ArcGIS Server.EPSS 0.2%CVE-2025-67709MEDIUMThere is a cross site scripting issue in ArcGIS Server.EPSS 0.2%CVE-2025-67708MEDIUMReflected cross-site scripting (XSS) vulnerability in ArcGIS Server.EPSS 0.2%CVE-2026-69229MEDIUMHTML injection vulnerability in Esri Portal for ArcGISEPSS 0.2%CVE-2025-57873MEDIUMBUG-000175222 - Reflected XSS vulnerability in Portal for ArcGIS.EPSS 0.2%CVE-2025-57877MEDIUMReflected XSS vulnerability in Portal for ArcGIS.EPSS 0.2%CVE-2025-57876MEDIUMStored XSS vulnerability in Portal for ArcGISEPSS 0.2%CVE-2025-55107MEDIUMBUG-000177335 ArcGIS Enterprise Sites has a stored Cross-site Scripting vulnerability.EPSS 0.2%CVE-2025-57875MEDIUMBUG-000164122 - Reflected XSS vulnerability in Portal for ArcGIS.EPSS 0.2%CVE-2025-55105MEDIUMBUG-000177336 - ArcGIS Enterprise Sites has a stored Cross-site Scripting vulnerability.EPSS 0.2%CVE-2025-57871MEDIUMBUG-000174020 - Reflected XSS vulnerability identified in Portal for ArcGIS. (11.3, 11.1, 10.9.1)EPSS 0.2%CVE-2025-55103MEDIUMBUG-000177333 - ArcGIS Enterprise Sites has a stored Cross-site Scripting vulnerability.EPSS 0.2%CVE-2025-57874MEDIUMBUG-000161627 - Reflected XSS vulnerability in Portal for ArcGIS.  (11.3, 11.1, 10.9.1)EPSS 0.2%CVE-2025-55106MEDIUMBUG-000173171 ArcGIS Enterprise Sites has a Cross-site Scripting vulnerability.EPSS 0.2%CVE-2024-25692MEDIUMBUG-000154722 - Cross-site request forgery (CSRF) issue in Portal for ArcGISEPSS 0.2%CVE-2025-1068HIGHThere is a code injection vulnerability in Esri ArcGIS AllSourceEPSS 0.2%CVE-2026-69237LOWHTML injection vulnerability in Esri Portal for ArcGISEPSS 0.2%CVE-2026-69230MEDIUMstored cross site scripting issue in Esri Portal for ArcGISEPSS 0.2%CVE-2025-55104MEDIUMBUG-000173918 - ArcGIS Enterprise Sites has a security vulnerability.EPSS 0.2%