CVE-2026-33519
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
An incorrect authorization vulnerability exists in Esri Portal for ArcGIS 11.4, 11.5 and 12.0 on Windows, Linux and Kubernetes that did not correctly check permissions assigned to developer credentials.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Esri | Portal for ArcGIS | 11.4 | affected |
| Esri | Portal for ArcGIS | 11.5 | affected |
| Esri | Portal for ArcGIS | 12.0 | affected |
Weaknesses
- CWE-266: CWE-266: Incorrect Privilege Assignment (4.19.1)
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: yes
- Technical Impact: total
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.