Unrated severityNVD Advisory· Published Apr 4, 2024· Updated Apr 10, 2025
Reflected XSS in Portal for ArcGIS
CVE-2024-25698
Description
There is a reflected cross site scripting vulnerability in the home application in Esri Portal for ArcGIS 11.1 and below on Windows and Linux that allows a remote, unauthenticated attacker to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser.
Affected products
2<=11.1+ 1 more
- (no CPE)range: <=11.1
- (no CPE)range: all
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.