https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T15:33:44.727797+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2025-08800 cnvd-2025-08800 2026-10-22T15:33:44.731500+00:00 cnvd-2025-08800 https://cve.radiocsirt.org/vuln/euvd-2026-228555 EUVD-2026-228555 2026-10-22T15:33:44.731531+00:00 EUVD-2026-228555 https://cve.radiocsirt.org/vuln/fkie_cve-2023-25841 fkie_cve-2023-25841 2026-10-22T15:33:44.731545+00:00

There is a stored Cross-site Scripting vulnerability in Esri ArcGIS Server versions 11.0 and below on Windows and Linux platforms that may allow a remote, unauthenticated attacker to create crafted content which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser.

Mitigation: Disable anonymous access to ArcGIS Feature services with edit capabilities.

 https://cve.radiocsirt.org/vuln/ghsa-799h-8vpw-vp7q GHSA-799h-8vpw-vp7q 2026-10-22T15:33:44.731577+00:00

There is a stored Cross-site Scripting vulnerability in Esri ArcGIS Server versions 10.8.1 – 11.0 on Windows and Linux platforms that may allow a remote, unauthenticated attacker to create crafted content which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser.

Mitigation: Disable anonymous access to ArcGIS Feature services with edit capabilities.

 https://cve.radiocsirt.org/vuln/gsd-2023-25841 gsd-2023-25841 2026-10-22T15:33:44.731597+00:00 gsd-2023-25841 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1867 WID-SEC-W-2023-1867 — ESRI ArcGIS: Mehrere Schwachstellen ermöglichen Cross-Site Scripting 2026-10-22T15:33:44.731609+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in ESRI ArcGIS ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.