CVE-2025-55104: falha de média gravidade em Esri Portal for ArcGIS Enterprise Sites
BUG-000173918 - ArcGIS Enterprise Sites has a security vulnerability.
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.8epss 0.2%
A stored cross-site scripting (XSS) vulnerability exists ArcGIS HUB and ArcGIS Enterprise Sites which allows an authenticated user with the ability to create or edit a site to add and store an XSS payload. If this stored XSS payload is triggered by any user attacker supplied JavaScript may execute in the victim's browser.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Produtos afetados
Esri · Portal for ArcGIS Enterprise SitesCVEs relacionadas — Esri Portal for ArcGIS Enterprise Sites
No mesmo produto, das mais perigosas para as menos.
CVE-2025-55107MEDIUMBUG-000177335 ArcGIS Enterprise Sites has a stored Cross-site Scripting vulnerability.EPSS 0.2%CVE-2025-55106MEDIUMBUG-000173171 ArcGIS Enterprise Sites has a Cross-site Scripting vulnerability.EPSS 0.2%CVE-2025-55103MEDIUMBUG-000177333 - ArcGIS Enterprise Sites has a stored Cross-site Scripting vulnerability.EPSS 0.2%