critical9.1
CVE-2025-4967
Esri Portal for ArcGIS 11.4 and prior allows a remote, unauthenticated attacker to bypass the Portal’s SSRF protections.
Impact
Esri Portal for ArcGIS 11.4 and prior allows a remote, unauthenticated attacker to bypass the Portal’s SSRF protections.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Esri | Portal For Arcgis | through 11.4 |