{"apiVersion":"1.0","identifier":"CVE-2026-69235","description":"There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, privileged attacker to inject malicious code that could potentially execute arbitrary in a victim-s browser. Users working with ArcGIS Enterprise 11.1, 11.3, and 11.5 are encouraged to patch. All users are advised to upgrade to the latest long-term support release.","publishedAt":"2026-08-21T21:17:04","lastModifiedAt":"2026-08-26T16:54:26","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-69235","cvssScore":6.1,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","epssProbability":0.00177,"riskScore":0.62,"affectedProduct":"Esri Portal for ArcGIS","affectedVersions":"<11.5","vulnerabilityType":"Web app","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-69235","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-69235","en":"https://www.redsauce.net/en/cves/CVE-2026-69235","fr":"https://www.redsauce.net/fr/cves/CVE-2026-69235","pt":"https://www.redsauce.net/pt/cves/CVE-2026-69235","de":"https://www.redsauce.net/de/cves/CVE-2026-69235","sk":"https://www.redsauce.net/sk/cves/CVE-2026-69235","el":"https://www.redsauce.net/el/cves/CVE-2026-69235"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-69235"}}