Unrated severityNVD Advisory· Published Oct 4, 2024· Updated Apr 10, 2025
BUG-000165286 - Reflected XSS in Portal for ArcGIS
CVE-2024-25691
Description
There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 11.1 and below which may allow a remote, unauthenticated attacker to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser.
Affected products
2<=11.1+ 1 more
- (no CPE)range: <=11.1
- (no CPE)range: all
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.