FEDRAMP CATALOG › ArcGIS Online (AGO)

ArcGIS Online (AGO)

ESRI · package FR1811073663

Current status Authorized · LI-SaaS impact · since 2026-07-07 Service modelSaaS MarketplaceRev5 · source: marketplace Security posture 1 high · 2 correlated CVEs

CMMC DOMAINS ADDRESSED

SC · System and Communications Protection IA · Identification and Authentication MP · Media Protection

STATUS TIMELINE · SCD2

STATUS	IMPACT	FROM	TO
Authorized	LI-SaaS	2026-07-07	current

AUTHORIZATIONS

AGENCY	TYPE	DATE
Department of the Interior	Agency	2018-06-27

EXPOSED CVEs · CORRELATED TO THIS PRODUCT all exposures

SEVERITY	CVE	TITLE	PUBLISHED
HIGH	CVE-2026-13020	CVE-2026-13020: A Weak Password Recovery Mechanism for Forgotten Password exists in Esri Portal	2026-07-07
MEDIUM	CVE-2026-9182	CVE-2026-9182: ArcGIS Server contains an unrestricted file upload vulnerability. An unauthentic	2026-07-06