Reflected Cross Site Scripting Vulnerability in Esri Portal for ArcGIS

CVE-2025-57877

What is CVE-2025-57877?

A reflected cross site scripting flaw exists in Esri Portal for ArcGIS versions 11.4 and earlier, which permits remote attackers with administrative access to inject malicious JavaScript code via crafted input. This security weakness can be exploited to execute arbitrary code in the user's browser, leading to potential data exposure and unauthorized actions.

References