Approved changes feed: RSS · Atom

cpe:2.3:a:esri:arcgis_enterprise_builder:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEsri (7fc7b1c4-e95b-5bc9-bfb4-4695cd2e3e82)
ProductArcgis Enterprise Builder (31bd8ed1-c336-59c9-951b-440f5701386d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-25700 vulnerable 2026-06-03 14:55:13.997344 Persistent XSS in URL added to a shared map
MEDIUM (4.8)
There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Web App Builder versions 11.1 and below that may allow a remote, authenticated attacker to create a crafted link that is stored in a web map link which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser. The privileges required to execute this attack are high.
Published: 2024-04-04T17:55:01.734Z
Updated: 2025-05-12T15:19:11.410Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.