PT-2026-79468 · Esri · Portal For Arcgis
CVE-2026-69232
·
Published
2026-08-21
·
Updated
2026-08-24
CVSS v3.1
5.5
Medium
| Vector | AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Esri Portal for ArcGIS versions prior to 11.6
Description
A stored cross site scripting issue exists that allows a remote, privileged attacker to inject malicious code. This could lead to the execution of arbitrary JavaScript within the browser of a victim user.
Recommendations
Update to the latest long-term support release.
As a temporary mitigation, restrict the privileges of users who can perform actions that lead to the storage of input data.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Portal For Arcgis