Stored Cross-Site Scripting Vulnerability in Esri ArcGIS Server

CVE-2025-67709

What is CVE-2025-67709?

A stored cross-site scripting vulnerability exists in Esri ArcGIS Server 11.4 and earlier versions on both Windows and Linux platforms. This issue may allow a remote, unauthenticated attacker to store malicious scripts in specific configurations. If successfully exploited, these scripts can execute in the context of a victim's browser, potentially compromising sensitive data and enabling the attacker to perform unauthorized actions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References