CVE-2025-67705

CVE-2025-67705 affects Esri ArcGIS Server 11.4 and earlier on Windows and Linux. The issue is a stored cross-site scripting (XSS) vulnerability where, in some configurations, a remote unauthenticated attacker can store files containing malicious code that may execute in the context of a victim’s ...