Portal for ArcGIS Sites vulnerabilities

2 known vulnerabilities in Portal for ArcGIS Sites from Esri. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.4 High severity

  Portal for ArcGIS Sites: Improper Neutralization of Input During Web Page Generation

  CVE-2023-25837Jul 21, 2023Esri

  There is a Cross‑Site Scripting (XSS) vulnerability in Esri ArcGIS Enterprise Sites versions 10.9 and below that may allow a remote, authenticated attacker to create a crafted link which, when clicked by a victim, could result in the execution of arbitrary Jav

• 8.4 High severity

  Portal for ArcGIS Sites: Improper Neutralization of Input During Web Page Generation

  CVE-2023-25835Jul 21, 2023Esri

  There is a stored Cross‑Site Scripting (XSS) vulnerability in Esri Portal for ArcGIS Sites versions 11.1 and below that may allow a remote, authenticated attacker with high‑privileged access to create a crafted link that is persisted within the site configurat