CVE-2025-57879

Name of the Vulnerable Software and Affected Versions Esri Portal for ArcGIS versions 11.4 and below

Description An unvalidated redirect issue exists in Esri Portal for ArcGIS that could allow a remote, unauthenticated attacker to create a URL designed to redirect a user to a website of the attacker’s choosing, potentially simplifying phishing attempts. The issue involves manipulating URLs to redirect users to arbitrary websites.

Recommendations Update Esri Portal for ArcGIS to a version later than 11.4.