medium4.8
CVE-2025-57877
There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS 11.4 and below that may allow a remote authenticated attacker with administra…
Impact
There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS 11.4 and below that may allow a remote authenticated attacker with administrative access to supply a crafted string which would execute arbitrary JavaScript code in the browser.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Esri | Portal For Arcgis | Versions 10.9.1, 11.0, 11.1, 11.2, 11.3, 11.4 |