CVE-2022-38193: Esri Portal For Arcgis

Critical severity, CVSS 9.6. EPSS: 0.9% chance of exploitation in the next 30 days.

There is a code injection vulnerability in Esri Portal for ArcGIS versions 10.8.1 and below that may allow a remote, unauthenticated attacker to pass strings which could potentially cause arbitrary code execution.

Affected products

• Esri Portal For Arcgis: up to and including 10.8.1

Published 2022-08-16. Last modified 2026-06-17.