Unrated severityNVD Advisory· Published Apr 4, 2024· Updated Apr 10, 2025
Stored XSS in Portal for ArcGIS
CVE-2024-25697
Description
There is a Cross-site Scripting vulnerability in Portal for ArcGIS in versions 11.1 and below that may allow a remote, authenticated attacker to create a crafted link which when opening an authenticated users bio page will render an image in the victims browser. The privileges required to execute this attack are low.
Affected products
2<=11.1+ 1 more
- (no CPE)range: <=11.1
- (no CPE)range: all
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.