Vulnerability Database

308,926

Total vulnerabilities in the database

CVE-2023-25837

There is a Cross-site Scripting vulnerability in Esri ArcGIS Enterprise Sites versions 10.9 and below that may allow a remote, authenticated attacker to create a crafted link which when clicked by a victim could potentially execute arbitrary JavaScript code in the target's browser.  The privileges required to execute this attack are high.   

The impact to Confidentiality, Integrity and Availability are High.

  • Published: Jul 21, 2023
  • Updated: Nov 16, 2025
  • CVE: CVE-2023-25837
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.4
  • AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

CWEs:

OWASP TOP 10:

Software From Fixed in
esri / portal_for_arcgis 10.8.1 10.9.x