PT-2025-54463
CVE-2025-67705
·
Published
2025-12-31
·
Updated
2026-09-23
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Esri ArcGIS Server versions prior to 11.4
Description
A stored cross site scripting issue exists in Esri ArcGIS Server. In certain configurations, a remote, unauthenticated attacker can store files containing malicious code that may execute within a victim’s browser. The issue affects systems on Windows and Linux.
Recommendations
Update Esri ArcGIS Server to version 11.4 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾