CVE-2025-67708

creationtimestamp| type| source ---|---|--- 2026-01-01 00:30:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbd4tcp2dd2c 2026-01-02 08:00:43+00:00| seen| https://gist.github.com/Darkcrai86/35152bec2fd0b2b011cb7b64b24312c3 2026-01-02 18:51:10+00:00| seen|...

CVE-2025-67708 Reflected cross-site scripting (XSS) vulnerability in ArcGIS Server.

There is a stored cross site scripting issue in Esri ArcGIS Server 11.4 and earlier on Windows and Linux that in some configurations allows a remote unauthenticated attacker to store files that contain malicious code that may execute in the context of a victim’s browser...