CVEs published by Environmental Systems Research Institute, Inc.

CVEs published by Environmental Systems Research Institute, Inc. (CVE Numbering Authority). 4 tracked.

CVE-2026-13019 CRITICAL 9.8 UPGRADE Esri Portal for ArcGIS versions 12.1 and earlier on Windows, Linux and Kubernetes have a missing authenticatio
CVE-2026-9181 CRITICAL 9.8 UPGRADE Esri ArcGIS Server contains a directory traversal vulnerability
CVE-2026-9182 CRITICAL 9.8 UPGRADE Esri ArcGIS Server contains an unrestricted file upload vulnerability
CVE-2026-13020 HIGH 8.1 UPGRADE A Weak Password Recovery Mechanism for Forgotten Password exists in Esri Portal for ArcGIS versions 12.1 and e