Medium severity5.4NVD Advisory· Published Apr 4, 2024· Updated Jun 17, 2026
CVE-2024-25697
CVE-2024-25697
Description
There is a Cross-site Scripting vulnerability in Portal for ArcGIS in versions 11.1 and below that may allow a remote, authenticated attacker to create a crafted link which when opening an authenticated users bio page will render an image in the victims browser. The privileges required to execute this attack are low.
Affected products
3all+ 1 more
- (no CPE)range: all
- cpe:2.3:a:esri:portal_for_arcgis:*:*:*:*:*:*:*:*range: <=11.1
- Range: <=11.1
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.