CVE-2025-4967
Server Side Request Forgery (SSRF) vulnerability in Portal for ArcGIS
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Server Side Request Forgery (SSRF) vulnerability in Portal for ArcGIS
Esri Portal for ArcGIS 11.4 and prior allows a remote, unauthenticated attacker to bypass the Portal’s SSRF protections.
Reserved 2025-05-19 | Published 2025-05-29 | Updated 2025-05-29 | Assigner EsriCWE-918 Server-Side Request Forgery (SSRF)SSRF
www.esri.com/...rtal-for-arcgis-security-2025-update-2-patch
Support options
