Do Son Esri issues an urgent fix for critical 9.8 CVSS flaws in ArcGIS. Over-scoped developer credentials could expose GIS data. Patch your portal immediately.
Portal for ArcGIS
Esri patches a critical SSRF vulnerability in Portal for ArcGIS, allowing unauthenticated remote attackers to bypass protections and access internal services.
Explore the critical CVE-2025-2538 vulnerability in ArcGIS Enterprise, risking unauthorized admin access and data control.