Medium · 5.4 CVE-2021-29110 EUVD-2021-15751GHSA-v4cr-28cr-wjhv

Stored cross-site scripting (XSS) issue in Esri Portal for ArcGIS may allow a remote unauthenticated attacker to pass and store malicious strings in the home application.

Published Oct 1, 2021 · Updated Apr 10, 2025 · Assigned by Esri

Description

Affected products

Vendor	Product	Affected	Fixed
Esri	Portal for ArcGIS	All – ≤ 10.9	—

References

https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/Portal-for-ArcGIS-Security-2021-Update-1-Patch/