Stored Cross-Site Scripting Vulnerability in Esri ArcGIS Server

CVE-2025-67703

What is CVE-2025-67703?

A stored cross-site scripting vulnerability has been identified in Esri ArcGIS Server 11.4 and earlier versions running on both Windows and Linux platforms. This issue could enable a remote attacker, without authentication, to store malicious scripts that would subsequently execute within the context of a user's browser session. The ramifications include the potential for unauthorized actions, data theft, and further exploits in compromised websites.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References