Detections
Analytics
CVE-2025-2538
critical
Description
A hardcoded credential vulnerability exists in a specific deployment pattern for Esri Portal for ArcGIS versions 11.4 and below that may allow a remote unauthenticated attacker to gain administrative access to the system.
References
https://support.esri.com/en-us/patches-updates/2025/portal-for-arcgis-security-2025-update-3-patch