What is GHSA-hwjf-fg7r-8gpr?

GHSA-hwjf-fg7r-8gpr is a security advisory published by GitHub Security Advisories with Medium severity. There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 12.0 and prior that...

Which CVE IDs does GHSA-hwjf-fg7r-8gpr cover?

GHSA-hwjf-fg7r-8gpr covers the following CVE IDs: CVE-2026-69229. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-hwjf-fg7r-8gpr?

GHSA-hwjf-fg7r-8gpr has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

GHSA-hwjf-fg7r-8gprMediumCVSS 5.4

There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 12.0 and prior that...

Vendor

GitHub Security Advisories

Published

August 21, 2026

Last Modified

August 21, 2026

🔗 CVE IDs covered (1)

CVE-2026-69229 →

📋 Description

There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 12.0 and prior that allows a remote, authenticated attacker to insert arbitrary HTML into the Portal for ArcGIS Home application. Users working with ArcGIS Enterprise 11.1, 11.3, 11.5 and 12.0 are encouraged to patch. All users are advised to upgrade to the latest long-term support release.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-69229
https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/august-2026-arcgis-security-bulletin
https://github.com/advisories/GHSA-hwjf-fg7r-8gpr