Threat Intel

v0.1

← CVEs

CVE-2025-67711

MED 6.1
Published
2025-12-31
Last Modified
2026-01-06
Affected Apps
3
Affected Devices
11
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
There is a stored cross site scripting issue in Esri ArcGIS Server 11.4 and earlier on Windows and Linux that in some configurations allows a remote unauthenticated attacker to store files that contain malicious code that may execute in the context of a victim’s browser.
Affected Applications in Environment 3
ArcGIS Pro v3.6.0.59527
9 devices
ArcGIS Pro v3.0.0.36056
1 device
server v1.0.0.0
1 device
Affected Devices 11
DESKTOP-GG50QGH Windows DESKTOP-INGTF0F Windows DPDNNR-MZ00KGER Windows DPFRWS-85405F8R Windows DPUWRL-L1283ZGV Windows DPUWRL-PF50236A Windows EBB107-01 Windows FACCLINTPREC556 Windows PRESTON Windows USULOAN270 Windows USULOAN368 Windows
References 1