Critical severity9.9NVD Advisory· Published Apr 4, 2024· Updated Jun 17, 2026
CVE-2024-25693
CVE-2024-25693
Description
There is a path traversal in Esri Portal for ArcGIS versions <= 11.2. Successful exploitation may allow a remote, authenticated attacker to traverse the file system to access files or execute code outside of the intended directory.
Affected products
3cpe:2.3:a:esri:portal_for_arcgis:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:esri:portal_for_arcgis:*:*:*:*:*:*:*:*range: <=11.2
- (no CPE)range: <=11.2
- (no CPE)range: all
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.