CVE-2026-69233 stored cross site scripting issue in Esri Portal for ArcGIS

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, administratively privileged attacker to inject malicious code that could potentially execute arbitrary in a victim’s browser. Users working with ArcGIS Enterprise 11.1, 11.3, an...

CVE-2026-69235 stored cross site scripting issue in Esri Portal for ArcGIS

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, privileged attacker to inject malicious code that could potentially execute arbitrary in a victim’s browser. Users working with ArcGIS Enterprise 11.1, 11.3, and 11.5 are...

CVE-2026-69235

Esri Portal for ArcGIS versions 11.5 and prior contain a stored cross-site scripting (XSS) vulnerability that allows a remote, privileged attacker to inject malicious code, potentially leading to arbitrary code execution in a victim's browser. The CVSS 3.1 score is 6.1 (Medium) with a scope chang...

EUVD-2026-64160

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, privileged attacker to inject malicious code that could potentially execute arbitrary in a victim’s browser. Users working with ArcGIS Enterprise 11.1, 11.3, and 11.5 are...

EUVD-2026-64086

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 12.1 and prior that may allow a remote, privileged attacker to inject malicious code that could potentially execute arbitrary JavaScript in a victim’s browser. Users working with ArcGIS Enterprise 11.1, 11.3, 11.5, 12...

CVE-2026-69236

A stored cross-site scripting (XSS) vulnerability in Esri Portal for ArcGIS versions 12.1 and prior allows a remote, privileged attacker to inject malicious code that can execute arbitrary JavaScript in a victim's browser. The CVSS 3.1 score is 6.1 (Medium) , reflecting network attack vector, low...

EUVD-2026-64082

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, privileged attacker to inject malicious code that could potentially execute arbitrary JavaScript in a victim’s browser. Users working with ArcGIS Enterprise 11.1, 11.3, 11.5 are...

CVE-2026-69232

Esri Portal for ArcGIS versions 11.5 and prior are affected by a stored cross-site scripting (XSS) vulnerability. A remote, privileged attacker can inject malicious code that executes arbitrary JavaScript in a victim's browser. The CVSS 3.1 score is 5.5 (MEDIUM) , reflecting the high privilege re...

CVE-2026-69231 stored cross site scripting issue in Esri Portal for ArcGIS

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, privileged attacker to inject malicious code that could potentially execute arbitrary JavaScript in a victim’s browser. Users working with ArcGIS Enterprise 11.1, 11.3, 11.5 are...

EUVD-2026-64159

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, privileged attacker to inject malicious code that could potentially execute arbitrary JavaScript in a victim’s browser. Users working with ArcGIS Enterprise 11.1, 11.3, 11.5 are...

CVE-2026-69231

Esri Portal for ArcGIS versions 11.5 and prior are affected by a stored cross-site scripting (XSS) vulnerability. A remote, privileged attacker can inject malicious code that executes arbitrary JavaScript in a victim's browser. The CVSS 3.1 score is 5.5 (Medium) , reflecting the high privilege re...

EUVD-2026-64158

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, administratively privileged attacker to inject malicious code that could potentially execute arbitrary in a victim’s browser. Users working with ArcGIS Enterprise 11.1, 11.3, an...

CVE-2026-69230 stored cross site scripting issue in Esri Portal for ArcGIS

There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, administratively privileged attacker to inject malicious code that could potentially execute arbitrary in a victim’s browser. Users working with ArcGIS Enterprise 11.1, 11.3, an...

CVE-2026-69230

A stored cross-site scripting (XSS) vulnerability in Esri Portal for ArcGIS versions 11.5 and prior allows a remote, administratively privileged attacker to inject malicious code that executes in a victim's browser. The CVSS v3.1 score is 5.5 (Medium) , reflecting high privileges required, change...

CVE-2026-69238 HTML injection vulnerability in Esri Portal for ArcGIS

There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.5 and prior that allows a remote, highly priviliged attacker to insert arbitrary HTML into the Portal for ArcGIS Home application. Users working with ArcGIS Enterprise 11.1, 11.3, and 11.5 are encouraged to patch. All...

CVE-2026-69238

Esri Portal for ArcGIS versions 11.5 and prior are affected by an HTML injection vulnerability in the Portal for ArcGIS Home application . A remote, highly privileged attacker can insert arbitrary HTML into the application. The CVSS 3.1 score is 3.5 (LOW) , reflecting the high privilege requireme...

CVE-2026-14953

A low-privileged remote attacker can enumerate all configured users and identify which accounts hold elevated privileges using the endpoint /api/user/fetch-all.php...

Linux Distros Unpatched Vulnerability : CVE-2026-71135

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable...

Linux Distros Unpatched Vulnerability : CVE-2026-71134

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable...

Linux Distros Unpatched Vulnerability : CVE-2026-71140

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable...