CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.1. It affects Windows, Linux. It may be remotely exploitable. Exploitation may require the attacker to be authenticated.
CVE
CVE-2025-67703
Severity
MEDIUM
CVSS
6.1
EPSS
0.20%
Windows Linux
Original NVD Description
There is a stored cross site scripting issue in Esri ArcGIS Server 11.4 and earlier on Windows and Linux that in some configurations allows a remote unauthenticated attacker to store files that contain malicious code that may execute in the context of a victim’s browser.
Related CVEs
Other vulnerabilities affecting the same vendor(s)