CyberRota Analysis
AI-GeneratedA stored cross-site scripting vulnerability exists in Esri Portal for ArcGIS versions 11.5 and earlier, allowing a remote, privileged attacker to inject malicious code that could execute arbitrary JavaScript in a victim's browser. This could lead to unauthorized actions or data exposure for users interacting with the affected software. Organizations using ArcGIS Enterprise versions 11.1, 11.3, or 11.5 should prioritize patching to mitigate this risk.
Original NVD Description
There is a stored cross site scripting issue in Esri Portal for ArcGIS versions 11.5 and prior that may allow a remote, privileged attacker to inject malicious code that could potentially execute arbitrary JavaScript in a victim’s browser. Users working with ArcGIS Enterprise 11.1, 11.3, 11.5 are encouraged to patch. All users are advised to upgrade to the latest long-term support release.
Related CVEs
Other vulnerabilities affecting the same vendor(s)