Reflected Cross Site Scripting Vulnerability in Esri Portal for ArcGIS

CVE-2025-57871

What is CVE-2025-57871?

A reflected cross site scripting vulnerability exists in Esri Portal for ArcGIS versions 11.4 and earlier. This vulnerability can be exploited by an authenticated attacker with administrative privileges, who can inject specially crafted strings. When executed, these strings may allow arbitrary JavaScript code to run within the user's browser, potentially compromising user data and system integrity. Users are encouraged to apply the latest updates to mitigate this risk.

References