Beveiligingsadvies

CVE-2024-25708

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-04-04 17:52:48

Laatst bijgewerkt 2025-04-10 18:50:40

Toegewezen door Esri

CVSS-score 4.8

Status PUBLISHED

Beschrijving

There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Web App Builder versions 10.9.1 and below that may allow a remote, authenticated attacker to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser. The privileges required to execute this attack are high.

← Alle CVE's bekijken Bekijk op cve.org ↗