Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2025-2538

BUG-000174336

Description

A hardcoded credential vulnerability exists in a specific deployment pattern for Esri Portal for ArcGIS versions 11.4 and below that may allow a remote unauthenticated attacker to gain administrative access to the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Esri Portal for ArcGIS

Default version status: unaffected

  • All to ≤ 11.4affected

References