High severity7.2NVD Advisory· Published Apr 4, 2024· Updated Jun 17, 2026
CVE-2024-25695
CVE-2024-25695
Description
There is a Cross-site Scripting vulnerability in Portal for ArcGIS in versions 11.2 and below that may allow a remote, authenticated attacker to provide input that is not sanitized properly and is rendered in error messages. The are no privileges required to execute this attack.
Affected products
3cpe:2.3:a:esri:portal_for_arcgis:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:esri:portal_for_arcgis:*:*:*:*:*:*:*:*range: <=11.2
- (no CPE)range: all
- Range: <=11.2
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.