CVE-2025-55104
A stored cross-site scripting (XSS) vulnerability exists ArcGIS HUB and ArcGIS Enterprise Sites which allows an authenticated user with the ability to create or edit a site to add and store an XSS payload. If this stored XSS payload is triggered by any user attacker supplied JavaScript may execute in the victim's browser.
Vendor
Product
CWE
Yayın Tarihi
2025-08-21 20:15:46
Güncelleme
2025-09-05 15:10:03
Source Identifier
psirt@esri.com
KEV Date Added
-