CVE-2025-2538

BUG-000174336 PUBLISHED

Description (CNA)

A hardcoded credential vulnerability exists in a specific deployment pattern for Esri Portal for ArcGIS versions 11.4 and below that may allow a remote unauthenticated attacker to gain administrative access to the system.

Affected (CNA)

Vendor / product	Versions
Esri / Portal for ArcGIS	affected All through 11.4

CWE

CWE-798

References

https://support.esri.com/en-us/patches-updates/2025/portal-for-arcgis-security-2025-update-3-patch

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.