← All advisories

Critical severity9.1NVD Advisory· Published May 29, 2025· Updated Jun 17, 2026

CVE-2025-4967

CVE-2025-4967

Description

Esri Portal for ArcGIS 11.4 and prior allows a remote, unauthenticated attacker to bypass the Portal’s SSRF protections.

Affected products

3

Esri/Portal For Arcgis3 versions
cpe:2.3:a:esri:portal_for_arcgis:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:esri:portal_for_arcgis:*:*:*:*:*:*:*:*range: <=11.4
- (no CPE)range: <=11.4
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

1

www.esri.com/arcgis-blog/products/trust-arcgis/administration/portal-for-arcgis-security-2025-update-3-patchnvd

News mentions

0

No linked articles in our index yet.