PT-2025-54466
CVE-2025-67708
·
Published
2025-12-31
·
Updated
2026-09-23
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Esri ArcGIS Server versions 11.4 and earlier
Description
A stored cross-site scripting issue exists in Esri ArcGIS Server. In certain setups, a remote, unauthenticated attacker can store files containing malicious code that could execute within a victim's browser. The issue affects systems on Windows and Linux.
Recommendations
Update Esri ArcGIS Server to a version later than 11.4.
Found an issue in the description? Have something to add? Feel free to write us 👾