{"apiVersion":"1.0","identifier":"CVE-2026-69232","description":"There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, privileged attacker to inject malicious code that could potentially execute arbitrary JavaScript in a victim-s browser. Users working with ArcGIS Enterprise 11.1, 11.3, 11.5 are encouraged to patch. All users are advised to upgrade to the latest long-term support release.","publishedAt":"2026-08-21T21:17:03","lastModifiedAt":"2026-08-26T16:54:26","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-69232","cvssScore":5.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N","epssProbability":0.00238,"riskScore":0.56,"affectedProduct":"Esri Portal for ArcGIS","affectedVersions":"<11.5","vulnerabilityType":"Web app","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-69232","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-69232","en":"https://www.redsauce.net/en/cves/CVE-2026-69232","fr":"https://www.redsauce.net/fr/cves/CVE-2026-69232","pt":"https://www.redsauce.net/pt/cves/CVE-2026-69232","de":"https://www.redsauce.net/de/cves/CVE-2026-69232","sk":"https://www.redsauce.net/sk/cves/CVE-2026-69232","el":"https://www.redsauce.net/el/cves/CVE-2026-69232"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-69232"}}