{"apiVersion":"1.0","identifier":"CVE-2026-69236","description":"There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 12.1 and prior that may allow a remote, privileged attacker to inject malicious code that could potentially execute arbitrary JavaScript in a victim-s browser. Users working with ArcGIS Enterprise 11.1, 11.3, 11.5, 12.0 or 12.1 are encouraged to patch. All users are advised to upgrade to the latest long-term support release and apply the patch.","publishedAt":"2026-08-21T21:17:04","lastModifiedAt":"2026-08-26T16:54:26","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-69236","cvssScore":6.1,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","epssProbability":0.00177,"riskScore":0.62,"affectedProduct":"Esri Portal for ArcGIS","affectedVersions":"<12.1","vulnerabilityType":"Web app","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-69236","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-69236","en":"https://www.redsauce.net/en/cves/CVE-2026-69236","fr":"https://www.redsauce.net/fr/cves/CVE-2026-69236","pt":"https://www.redsauce.net/pt/cves/CVE-2026-69236","de":"https://www.redsauce.net/de/cves/CVE-2026-69236","sk":"https://www.redsauce.net/sk/cves/CVE-2026-69236","el":"https://www.redsauce.net/el/cves/CVE-2026-69236"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-69236"}}