CVE-2025-57874 | Esri Portal for ArcGIS up to 11.4 String cross site scripting

September 29, 2025 Yanac

A vulnerability labeled as problematic has been found in Esri Portal for ArcGIS up to 11.4. The affected element is an unknown function of the component String Handler. Executing manipulation can lead to cross site scripting.

This vulnerability is handled as CVE-2025-57874. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More