CVE-2025-55104 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A stored cross-site scripting (XSS) vulnerability exists ArcGIS HUB and ArcGIS Enterprise Sites which allows an authenticated user with the ability to create or…
Medium CVSS: 4.8

CVE-2025-55104

A stored cross-site scripting (XSS) vulnerability exists ArcGIS HUB and ArcGIS Enterprise Sites which allows an authenticated user with the ability to create or edit a site to add and store an XSS payload. If this stored XSS payload is triggered by any user attacker supplied JavaScript may execute in the victim's browser.
Vendor
Esri
Product
Portal For Arcgis
CWE
CWE-79
Yayın Tarihi
2025-08-21 20:15:46
Güncelleme
2025-09-05 15:10:03
Source Identifier
psirt@esri.com
KEV Date Added
-

Kategoriler

Referanslar