CVE-2025-2538

Summary

A hardcoded credential vulnerability exists in a specific deployment pattern for Esri Portal for ArcGIS versions 11.4 and below that may allow a remote unauthenticated attacker to gain administrative access to the system.

Affected Software

Weaknesses

• CWE-798: CWE-798 Use of Hard-coded Credentials

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: total

References

• https://support.esri.com/en-us/patches-updates/2025/portal-for-arcgis-security-2025-update-3-patch

• ←Previous
• Next→