laptop and a wrench


Reflected XSS in Portal for ArcGIS Home app.

Last Published: February 19, 2021 Portal for ArcGIS
Bug ID Number BUG-000132452
SubmittedJuly 22, 2020
Last ModifiedFebruary 14, 2023
Applies toPortal for ArcGIS
Version found10.7.1
Operating SystemWindows OS
Operating System Version2016 64 Bit
Version Fixed10.8.1

Additional Information

A fix for this defect for version 10.6.1 is provided in the Portal for ArcGIS Security 2020 Update 2 Patch which is available at


The Portal for ArcGIS Security 2020 Update 2 Patch is now live on the support site. The URL is:

Steps to Reproduce

Bug ID: BUG-000132452


  • Portal for ArcGIS

Get help from ArcGIS experts

Contact technical support

Download the Esri Support App

Go to download options

Discover more on this topic