Unvalidated Redirect Vulnerability in Esri Portal for ArcGIS by Esri

CVE-2025-57879

What is CVE-2025-57879?

An unvalidated redirect vulnerability exists in Esri Portal for ArcGIS versions 11.4 and earlier. This flaw can be exploited by remote, unauthenticated attackers who craft deceptive URLs, enabling them to redirect victims to arbitrary websites. Such redirections can facilitate various social engineering attacks, particularly phishing schemes, potentially compromising sensitive user information.

References