Good afternoon all.

In case you were not aware I wanted to share this with you. If you are running ArcGIS Enterprise 10.9.1 or 11.1 the security vulnerability patch is available.  This is a major issue for Portal installations that are exposed externally.  Steps are listed further down in the document to apply the repair and patch.  It’s advised to backup and/or snapshot your Portal servers prior to applying the fix.

Vulnerability Information

https://nvd.nist.gov/vuln/detail/CVE-2023-25835

Esri repair and patch

https://support.esri.com/en-us/patches-updates/2023/defective-arcgis-enterprise-patch?aduc=Email&eid=d9ea1cf485032913a76e05a5d82f039f88106a3e690d4c76450159b420ec4587&sf_id=7015x000001RkiNAAS&adut=4716376&aduco=ArcGIS_Enterprise_Patch_EML&aduca=CRAArcGISEnterprise&utm_id=7015x000001RkiNAAS&utm_campaign=CRAArcGISEnterprise&utm_term=4716376&utm_source=Email&utm_content=ArcGIS_Enterprise_Patch_EML&aducp=body_text

I want to thank  Joe Ausby, GIS Manager for the City of Wilson NC for bringing this issue to my attention.

Tripp Corbin, MCP, GISP

Business Development Manager – GIS & Aerial

SAM, LLC

470-998-8944 (Cell)

[log in to unmask]

Large file transfer