CVEvulnerability

CVE-2026-69228

5.3 MEDIUM Published 2026-08-21 Modified 2026-10-12 Official page ↗
Status
Analyzed
Published
2026-08-21
Last modified
2026-10-12
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-306

Description

There is a missing authentication vulnerability in Esri Portal for ArcGIS versions 12.0 and prior that may allow a remote, unauthenticated attacker to access a specific resource (not user content) that should only be accessible by authenticated users. Users working with ArcGIS Enterprise 11.1, 11.3, 11.5, or 12.0 are encouraged to patch. All users are advised to upgrade to the latest long-term support release.

Affected configurations

• esri portal for arcgis (< 11.1) • esri portal for arcgis 11.1 • esri portal for arcgis 11.2 • esri portal for arcgis 11.3 • esri portal for arcgis 11.4 • esri portal for arcgis 11.5 • esri portal for arcgis 12.0

Related

Weakness · CWE (1)

  • CWE-306 Missing Authentication for Critical Functionality weakness

References