CVE-2026-69238

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-69238", "assignerOrgId": "cedc17bb-4939-4f40-a1f4-30ae8af1094e", "state": "PUBLISHED", "assignerShortName": "Esri", "dateReserved": "2026-08-03T19:22:05.877Z", "datePublished": "2026-08-21T20:46:03.539Z", "dateUpdated": "2026-08-24T13:01:25.446Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "platforms": ["Windows", "Linux"], "product": "Portal for ArcGIS", "vendor": "Esri", "versions": [{"lessThanOrEqual": "11.5", "status": "affected", "version": "11.1", "versionType": "custom"}]}], "datePublic": "2026-08-20T16:36:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: oklch(1 0 0);\">There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.5 and prior that allows a remote, highly priviliged attacker to insert arbitrary HTML into the Portal for ArcGIS Home application. Users working with ArcGIS Enterprise 11.1, 11.3, and 11.5 are encouraged to patch. All users are advised to upgrade to the latest long-term support release.</span>"}], "value": "There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.5 and prior that allows a remote, highly priviliged attacker to insert arbitrary HTML into the Portal for ArcGIS Home application. Users working with ArcGIS Enterprise 11.1, 11.3, and 11.5 are encouraged to patch. All users are advised to upgrade to the latest long-term support release."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.5, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-79", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "cedc17bb-4939-4f40-a1f4-30ae8af1094e", "shortName": "Esri", "dateUpdated": "2026-08-21T20:46:03.539Z"}, "references": [{"url": "https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/august-2026-arcgis-security-bulletin"}], "source": {"discovery": "UNKNOWN"}, "title": "HTML injection vulnerability in Esri Portal for ArcGIS", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-69238", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-24T12:45:26.396983Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-24T13:01:25.446Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-69238", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-24T12:45:26.396983Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-24T12:55:18.721Z"}}], "cna": {"title": "HTML injection vulnerability in Esri Portal for ArcGIS", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.5, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Esri", "product": "Portal for ArcGIS", "versions": [{"status": "affected", "version": "11.1", "versionType": "custom", "lessThanOrEqual": "11.5"}], "platforms": ["Windows", "Linux"], "defaultStatus": "unaffected"}], "datePublic": "2026-08-20T16:36:00.000Z", "references": [{"url": "https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/august-2026-arcgis-security-bulletin"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.5 and prior that allows a remote, highly priviliged attacker to insert arbitrary HTML into the Portal for ArcGIS Home application. Users working with ArcGIS Enterprise 11.1, 11.3, and 11.5 are encouraged to patch. All users are advised to upgrade to the latest long-term support release.", "supportingMedia": [{"type": "text/html", "value": "<span style=\"background-color: oklch(1 0 0);\">There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.5 and prior that allows a remote, highly priviliged attacker to insert arbitrary HTML into the Portal for ArcGIS Home application. Users working with ArcGIS Enterprise 11.1, 11.3, and 11.5 are encouraged to patch. All users are advised to upgrade to the latest long-term support release.</span>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-79", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}], "providerMetadata": {"orgId": "cedc17bb-4939-4f40-a1f4-30ae8af1094e", "shortName": "Esri", "dateUpdated": "2026-08-21T20:46:03.539Z"}}}, "cveMetadata": {"cveId": "CVE-2026-69238", "state": "PUBLISHED", "dateUpdated": "2026-08-24T13:01:25.446Z", "dateReserved": "2026-08-03T19:22:05.877Z", "assignerOrgId": "cedc17bb-4939-4f40-a1f4-30ae8af1094e", "datePublished": "2026-08-21T20:46:03.539Z", "assignerShortName": "Esri"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "platforms": ["Windows", "Linux"], "product": "Portal for ArcGIS", "vendor": "Esri", "versions": [{"lessThanOrEqual": "11.5", "status": "affected", "version": "11.1", "versionType": "custom"}]}], "source": "psirt@esri.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:esri:portal_for_arcgis:*:*:*:*:*:*:*:*", "matchCriteriaId": "4E58D508-AABB-4147-8C91-D3AD2F967A57", "versionEndExcluding": "11.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:esri:portal_for_arcgis:11.1:-:*:*:*:*:*:*", "matchCriteriaId": "57DA68A3-0E09-4C8C-A98E-B027964FA17A", "vulnerable": true}, {"criteria": "cpe:2.3:a:esri:portal_for_arcgis:11.1:security_2024_update1:*:*:*:*:*:*", "matchCriteriaId": "C3A6B038-6C92-4A34-B980-E3872265FF89", "vulnerable": true}, {"criteria": "cpe:2.3:a:esri:portal_for_arcgis:11.1:security_2024_update2:*:*:*:*:*:*", "matchCriteriaId": "4DA6D70E-60D6-4CE6-AFA4-7BB191A23E3B", "vulnerable": true}, {"criteria": "cpe:2.3:a:esri:portal_for_arcgis:11.1:security_2025_update1:*:*:*:*:*:*", "matchCriteriaId": "9FCD40AD-6D5B-498C-AFD7-B84B4FD1E3F3", "vulnerable": true}, {"criteria": "cpe:2.3:a:esri:portal_for_arcgis:11.1:security_2025_update2:*:*:*:*:*:*", "matchCriteriaId": "3E2AE6CA-0F8E-4D40-94E3-FEAB2E7E2CF7", "vulnerable": true}, {"criteria": "cpe:2.3:a:esri:portal_for_arcgis:11.1:security_2025_update3:*:*:*:*:*:*", "matchCriteriaId": "CB18AD2D-85F6-4F7F-8579-08DC03BB4092", "vulnerable": true}, {"criteria": "cpe:2.3:a:esri:portal_for_arcgis:11.1:security_2026_update2:*:*:*:*:*:*", "matchCriteriaId": "79940776-2AEC-4547-B7E6-6068C40B3E9F", "vulnerable": true}, {"criteria": "cpe:2.3:a:esri:portal_for_arcgis:11.2:*:*:*:*:*:*:*", "matchCriteriaId": "F2E37361-8569-4023-BC3E-F36E7607CC7D", "vulnerable": true}, {"criteria": "cpe:2.3:a:esri:portal_for_arcgis:11.3:-:*:*:*:*:*:*", "matchCriteriaId": "CF8719BA-95F6-4AB6-8A86-6742BE828260", "vulnerable": true}, {"criteria": "cpe:2.3:a:esri:portal_for_arcgis:11.3:security_2025_update1:*:*:*:*:*:*", "matchCriteriaId": "7C19F9C7-F687-4865-8535-2E99E0AB0157", "vulnerable": true}, {"criteria": "cpe:2.3:a:esri:portal_for_arcgis:11.3:security_2025_update2:*:*:*:*:*:*", "matchCriteriaId": "FC7EED3B-056E-4B86-94E4-FF0B62E376CA", "vulnerable": true}, {"criteria": "cpe:2.3:a:esri:portal_for_arcgis:11.3:security_2025_update3:*:*:*:*:*:*", "matchCriteriaId": "18EB24C5-1C1F-48C1-B2B1-B5D6F98D368D", "vulnerable": true}, {"criteria": "cpe:2.3:a:esri:portal_for_arcgis:11.3:security_2026_update2:*:*:*:*:*:*", "matchCriteriaId": "BAF3B185-270A-4228-86C8-57D20C8EDF5B", "vulnerable": true}, {"criteria": "cpe:2.3:a:esri:portal_for_arcgis:11.4:*:*:*:*:*:*:*", "matchCriteriaId": "6A3EFAC1-1347-4C8E-BBCB-413888139F33", "vulnerable": true}, {"criteria": "cpe:2.3:a:esri:portal_for_arcgis:11.5:-:*:*:*:*:*:*", "matchCriteriaId": "595870AC-22E7-48D3-9C49-3917F9FC36F4", "vulnerable": true}, {"criteria": "cpe:2.3:a:esri:portal_for_arcgis:11.5:security_2026_update1:*:*:*:*:*:*", "matchCriteriaId": "B27FAC39-0BCB-44C9-843A-F7E191F0EC4A", "vulnerable": true}, {"criteria": "cpe:2.3:a:esri:portal_for_arcgis:11.5:security_2026_update2:*:*:*:*:*:*", "matchCriteriaId": "13093BF8-653E-4838-A734-6A843088A22F", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.5 and prior that allows a remote, highly priviliged attacker to insert arbitrary HTML into the Portal for ArcGIS Home application. Users working with ArcGIS Enterprise 11.1, 11.3, and 11.5 are encouraged to patch. All users are advised to upgrade to the latest long-term support release."}, {"lang": "es", "value": "Hay una vulnerabilidad de inyecci\u00f3n HTML en Esri Portal for ArcGIS versiones 11.5 y anteriores que permite a un atacante remoto y con altos privilegios insertar HTML arbitrario en la aplicaci\u00f3n Portal for ArcGIS Home. Se recomienda a los usuarios que trabajan con ArcGIS Enterprise 11.1, 11.3 y 11.5 que apliquen el parche. Se aconseja a todos los usuarios que actualicen a la \u00faltima versi\u00f3n de soporte a largo plazo."}], "id": "CVE-2026-69238", "lastModified": "2026-10-12T16:10:00.220", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.5, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 0.9, "impactScore": 2.5, "source": "psirt@esri.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 1.7, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-69238", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-08-24T12:45:26.396983Z", "version": "2.0.3"}}]}, "published": "2026-08-21T21:17:04.617", "references": [{"source": "psirt@esri.com", "tags": ["Vendor Advisory"], "url": "https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/august-2026-arcgis-security-bulletin"}], "sourceIdentifier": "psirt@esri.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "psirt@esri.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": ["windows", "linux"], "status": "affected", "versions": {"scheme": "generic", "value": "[11.1,11.5]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Portal for ArcGIS", "source": "cna", "vendor": "Esri"}, "product": "portal_for_arcgis", "vendor": "esri"}], "created": "2026-08-21T23:00:14.784415+00:00", "updated": "2026-08-22T00:45:05.144701+00:00", "vendors": ["esri", "esri$PRODUCT$portal_for_arcgis"]}