What is GHSA-m7mf-cx6j-4wpj?

GHSA-m7mf-cx6j-4wpj is a security advisory published by GitHub Security Advisories with Low severity. There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.3 and prior that...

Which CVE IDs does GHSA-m7mf-cx6j-4wpj cover?

GHSA-m7mf-cx6j-4wpj covers the following CVE IDs: CVE-2026-69237. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-m7mf-cx6j-4wpj?

GHSA-m7mf-cx6j-4wpj has a CVSS v3 base score of 3.8, published by GitHub Security Advisories.

GHSA-m7mf-cx6j-4wpjLowCVSS 3.8

There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.3 and prior that...

Vendor

GitHub Security Advisories

Published

August 21, 2026

Last Modified

August 21, 2026

🔗 CVE IDs covered (1)

CVE-2026-69237 →

📋 Description

There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.3 and prior that allows a remote attacker with administrative privileges to insert arbitrary HTML into an administrative API. Users working with ArcGIS Enterprise 11.1, and 11.3 are encouraged to patch. All users are advised to upgrade to the latest long-term support release.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-69237
https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/august-2026-arcgis-security-bulletin
https://github.com/advisories/GHSA-m7mf-cx6j-4wpj