PT-2026-79485 · Esri · Portal For Arcgis+2
CVE-2026-69234
·
Published
2026-08-21
·
Updated
2026-08-24
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Esri Portal for ArcGIS versions prior to 11.6
Description
A reflected cross site scripting issue exists that allows a remote, unauthenticated attacker to create a crafted link. If a victim clicks this link, arbitrary JavaScript code may be executed within their browser.
Recommendations
Update Esri Portal for ArcGIS to the latest long-term support release.
Migrate from ArcGIS Web App Builder developer edition to ArcGIS Experience Builder.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Arcgis Experience Builder
Arcgis Web App Builder
Portal For Arcgis