FAIL › dossier
FedRAMP provider ·
Dossier not yet built — the RAG curator builds one for players with ≥2 failure events (factory/dossier.py). The failure history and sentiment below are live.
| Date | Event | Sev | Flags | Shame | Summary |
|---|---|---|---|---|---|
| 2026-07-06 | CVE-2026-9182 | medium | ⚡RCE | 35 | ArcGIS Server contains an unrestricted file upload vulnerability. An unauthenticated attacker could exploit this issue by uploading a crafted file to the affected endpoint. Successful exploitation could allow arbitrary file upload. |
| 2026-07-07 | CVE-2026-13020 | high | 25 | A Weak Password Recovery Mechanism for Forgotten Password exists in Esri Portal for ArcGIS versions 12.1 and earlier on Windows, Linux and Kubernetes. A remote, unauthorized attacker may assume ownership of a user’s account by manipulating this mechanism. ArcGIS Administrators sh |
| Product | Status | Impact |
|---|---|---|
| ArcGIS Online (AGO) | Authorized | LI-SaaS |
| ArcGIS Online (AGO) Moderate | In Process | Moderate |
| Esri Managed Cloud Services Advanced Plus | Authorized | Moderate |