CVE-2026-69224

Received Received - Intake

Information Disclosure in Esri Portal for ArcGIS

Publication date: 2026-08-21

Last updated on: 2026-08-21

Assigner: Environmental Systems Research Institute, Inc.

Description

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 12.0 and earlier that may under difficult to reproduce circumstances allow a remote, unauthenticated attacker to reflect sensitive information in a http response body.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-21

Last Modified

2026-08-21

Generated

2026-08-22

AI Q&A

2026-08-22

EPSS Evaluated

N/A

NVD

CVE-2026-69224

EUVD

EUVD-2026-64152

Affected Vendors & Products

Vendor	Product	Version / Range
esri	portal_for_arcgis	to 12.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

This vulnerability is an information disclosure issue in Esri Portal for ArcGIS versions 12.0 and earlier. It allows a remote, unauthenticated attacker to potentially reflect sensitive information in an HTTP response body under difficult-to-reproduce circumstances.

Impact Analysis

An attacker could exploit this to access sensitive data exposed in HTTP responses, potentially leading to unauthorized information disclosure. The impact depends on the nature of the data reflected.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR or HIPAA if sensitive personal or health data is disclosed. Organizations may face legal penalties or reputational damage due to unauthorized data exposure.

Mitigation Strategies

Update Esri Portal for ArcGIS to a version later than 12.0 to address the information disclosure vulnerability. Monitor official Esri advisories for patches or workarounds.

Hi! I’m here to help you understand CVE-2026-69224. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70