← Back

CVE-2026-69224

nvd nist
Published: Aug 21, 2026Modified: Oct 12, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 12.0 and earlier that may under difficult to reproduce circumstances allow a remote, unauthenticated attacker to reflect sensitive information in a http response body.

Affected (21)

Esri
1 product
Portal For Arcgis
Configuration A
21 vulnerable
Vulnerable SoftwareAffected Versions
Esri
Portal For Arcgis
version < 11.1
Portal For Arcgis
Version 11.1
Portal For Arcgis
Version 11.1 security_2024_update1
Portal For Arcgis
Version 11.1 security_2024_update2
Portal For Arcgis
Version 11.1 security_2025_update1
Portal For Arcgis
Version 11.1 security_2025_update2
Portal For Arcgis
Version 11.1 security_2025_update3
Portal For Arcgis
Version 11.1 security_2026_update2
Portal For Arcgis
Version 11.2
Portal For Arcgis
Version 11.3
Portal For Arcgis
Version 11.3 security_2025_update1
Portal For Arcgis
Version 11.3 security_2025_update2
Portal For Arcgis
Version 11.3 security_2025_update3
Portal For Arcgis
Version 11.3 security_2026_update2
Portal For Arcgis
Version 11.4
Portal For Arcgis
Version 11.5
Portal For Arcgis
Version 11.5 security_2026_update1
Portal For Arcgis
Version 11.5 security_2026_update2
Portal For Arcgis
Version 12.0
Portal For Arcgis
Version 12.0 security_2026_update1
Portal For Arcgis
Version 12.0 security_2026_update2

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (1)

Source: psirt@esri.com
Vendor Advisory

Timeline

No history available yet.