Esri

www.esri.com ↗
C
CAUTION
86
Total CVEs
16
Crit / High
70
Medium
14%
Unpatched
0%
Patched
5.8
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB How we collect data →
// INTEL UPGRADE
Full Company Dossier — Coming Soon
Executive profiles, financial exposure, M&A risk, breach history & supply-chain threat mapping — all in one place.
OSINT FINANCIALS EXEC PROFILES BREACH DB
▸ CVE Trend by Year
▸ Patch Coverage
Patched
0%
Unpatched
14%
Under Review
86%
✓ 0 patched ✗ 18 unpatched ~ 110 under review
▸ Intelligence by Audience
PoC Available
9 / 20 shown
CISA KEV (Exploited)
0
Shodan Dorks
ssl:"esri" port:443
org:"Esri" http.status:200
Top EPSS (Exploitation Probability)
CVE-2026-9181 1.22% exploitation probability
CVE-2026-13019 0.85% exploitation probability
CVE-2026-9182 0.62% exploitation probability
CVE-2026-69228 0.34% exploitation probability
CVE-2026-69224 0.33% exploitation probability
Quick Facts for Reporting
Total CVEs tracked
86
Critical severity
7
Actively exploited (CISA)
0
Unpatched ratio
14%
Avg CVSS score
5.8
Security grade
C (CAUTION)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-08-03
Security Risk Score (for investors)
LOW
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
▸ Security News Google News
ArcGIS Server Security 2025 Update 2 Patch - Esri
Esri 2025-12-10
MNIT Blog / Minnesota IT Services - mn.gov
mn.gov 2026-02-17
ArcGIS Server Feature Services Security Patch - Esri
Esri 2025-10-06
ArcGIS and Apache Log4j Vulnerabilities - Esri
Esri 2023-05-22
Patching Cybersecurity Vulnerabilities? Get Out the Map - Esri
Esri 2022-01-04
MITRE Uses ArcGIS Knowledge To Analyze Critical Infrastructure Dependencies - Esri
Esri 2025-04-22
▸ Recent CVEs showing 20 of 128
CVE IDSeverityPatchEPSSDate
CVE-2026-69227 9.8 CRITICAL UNKNOWN / UNPATCHED — 2026-10-13
CVE-2026-10758 7.5 HIGH UNKNOWN / UNPATCHED — 2026-09-25
CVE-2026-69234 PoC 6.1 MEDIUM UNKNOWN / UNPATCHED 0.24% 2026-08-21
CVE-2026-69228 5.3 MEDIUM UNKNOWN / UNPATCHED 0.34% 2026-08-21
CVE-2026-69224 5.9 MEDIUM UNKNOWN / UNPATCHED 0.33% 2026-08-21
CVE-2026-69230 PoC 5.5 MEDIUM UNKNOWN / UNPATCHED 0.17% 2026-08-21
CVE-2026-69233 PoC 5.5 MEDIUM UNKNOWN / UNPATCHED 0.25% 2026-08-21
CVE-2026-69237 3.8 LOW UNKNOWN / UNPATCHED 0.17% 2026-08-21
CVE-2026-69231 PoC 5.5 MEDIUM UNKNOWN / UNPATCHED 0.24% 2026-08-21
CVE-2026-69238 PoC 3.5 LOW UNKNOWN / UNPATCHED 0.14% 2026-08-21
CVE-2026-69235 PoC 6.1 MEDIUM UNKNOWN / UNPATCHED 0.18% 2026-08-21
CVE-2026-69236 PoC 6.1 MEDIUM UNKNOWN / UNPATCHED 0.18% 2026-08-21
CVE-2026-69232 PoC 5.5 MEDIUM UNKNOWN / UNPATCHED 0.24% 2026-08-21
CVE-2026-69229 PoC 5.4 MEDIUM UNKNOWN / UNPATCHED 0.20% 2026-08-21
CVE-2026-69225 5.9 MEDIUM UNKNOWN / UNPATCHED 0.33% 2026-08-21
CVE-2026-13019 9.8 CRITICAL PATCH UNDER REVIEW 0.85% 2026-07-07
CVE-2026-13020 8.1 HIGH PATCH UNDER REVIEW 0.27% 2026-07-07
CVE-2026-9181 9.8 CRITICAL PATCH UNDER REVIEW 1.22% 2026-07-06
CVE-2026-9182 9.8 CRITICAL PATCH UNDER REVIEW 0.62% 2026-07-06
CVE-2026-2813 4.7 MEDIUM PATCH UNDER REVIEW 0.30% 2026-05-20
View all 128 CVEs for Esri →
▸Intel
HQRedlands, California, United States
Founded1969
Employees5,000
CEOJack Dangermond
Trust ScoreC — CAUTION
Max CVSS10.0
Last Updated2026-08-03
▸Top Weaknesses
CWE-79
Cross-Site Scripting (XSS)
58 occurrences in Esri CVEs (67% of total)
CWE-79 ⓘ
58
CWE-601
Open Redirect
6 occurrences in Esri CVEs (7% of total)
CWE-601 ⓘ
6
CWE-22
Unknown Weakness Type
5 occurrences in Esri CVEs (6% of total)
CWE-22 ⓘ
5
CWE-89
SQL Injection
3 occurrences in Esri CVEs (3% of total)
CWE-89 ⓘ
3
CWE-287
Improper Authentication
2 occurrences in Esri CVEs (2% of total)
CWE-287 ⓘ
2
CWE-266
Unknown Weakness Type
2 occurrences in Esri CVEs (2% of total)
CWE-266 ⓘ
2
CWE-426
Unknown Weakness Type
2 occurrences in Esri CVEs (2% of total)
CWE-426 ⓘ
2
CWE-434
Unrestricted File Upload
2 occurrences in Esri CVEs (2% of total)
CWE-434 ⓘ
2
▸Company Profile

Esri is a global leader in geographic information system (GIS) software, known for its flagship product ArcGIS, which enables spatial analysis, mapping, and location intelligence. The company's software is widely used in government, defense, utilities, and critical infrastructure sectors, making it a significant target for cybersecurity threats and vulnerabilities. Esri's products are frequently integrated into enterprise environments, and their security is critical for protecting sensitive geospatial data.

▸Response Metrics
Est. MTTR ⓘ ~500 days (Critical)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↘ -87% better
CVE count 2026 vs 2025:  54 → 7 CVEs
Patch Speed ⓘ Poor (>65% open)
14% of CVEs still unpatched.  Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
▸ Financial Risk Estimate
Est. GDPR Low
€656K
Est. GDPR High
€6.6M

Based on 7 critical CVEs, 0 CISA KEV, 98% unpatched. Model: GDPR Art.83 · not legal advice.

▸Actions
⚖ Compare with another vendor
▸Embed Badge
Esri C valtersit.com