PT-2026-79466
CVE-2026-69230
·
Published
2026-08-21
·
Updated
2026-10-12
Description by
CVSS 3.1
5.5
MediumMetricsAV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Esri Portal for ArcGIS versions prior to 11.6
Description
A stored cross-site scripting issue exists that allows a remote attacker with administrative privileges to inject malicious code. This could lead to the execution of arbitrary code within the browser of a victim.
Recommendations
Apply the available patch for ArcGIS Enterprise versions 11.1, 11.3, and 11.5.
Upgrade to the latest long-term support release.
Found an issue in the description? Have something to add? Feel free to write us 👾