CVE-2023-25832: Esri Portal For Arcgis

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

There is a cross-site-request forgery vulnerability in Esri Portal for ArcGIS Versions 11.0 and below that may allow an attacker to trick an authorized user into executing unwanted actions.

Affected products

• Esri Portal For Arcgis: up to and including 11.0

Published 2023-05-09. Last modified 2026-06-17.