7.5

CVE-2026-69224

information disclosure vulnerability in Esri Portal for ArcGIS

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 12.0 and earlier that may under difficult to reproduce circumstances allow a remote, unauthenticated attacker to reflect sensitive information in a http response body.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Esri ≫ Portal For Arcgis Version < 11.1
Esri ≫ Portal For Arcgis Version 11.1 Update -
Esri ≫ Portal For Arcgis Version 11.1 Update security_2024_update1
Esri ≫ Portal For Arcgis Version 11.1 Update security_2024_update2
Esri ≫ Portal For Arcgis Version 11.1 Update security_2025_update1
Esri ≫ Portal For Arcgis Version 11.1 Update security_2025_update2
Esri ≫ Portal For Arcgis Version 11.1 Update security_2025_update3
Esri ≫ Portal For Arcgis Version 11.1 Update security_2026_update2
Esri ≫ Portal For Arcgis Version 11.2
Esri ≫ Portal For Arcgis Version 11.3 Update -
Esri ≫ Portal For Arcgis Version 11.3 Update security_2025_update1
Esri ≫ Portal For Arcgis Version 11.3 Update security_2025_update2
Esri ≫ Portal For Arcgis Version 11.3 Update security_2025_update3
Esri ≫ Portal For Arcgis Version 11.3 Update security_2026_update2
Esri ≫ Portal For Arcgis Version 11.4
Esri ≫ Portal For Arcgis Version 11.5 Update -
Esri ≫ Portal For Arcgis Version 11.5 Update security_2026_update1
Esri ≫ Portal For Arcgis Version 11.5 Update security_2026_update2
Esri ≫ Portal For Arcgis Version 12.0 Update -
Esri ≫ Portal For Arcgis Version 12.0 Update security_2026_update1
Esri ≫ Portal For Arcgis Version 12.0 Update security_2026_update2
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.33% 0.261
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
psirt@esri.com 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/august-2026-arcgis-security-bulletin
Vendor Advisory