https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T22:15:23.443499+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-238909 EUVD-2026-238909 2026-10-07T22:15:23.446465+00:00 EUVD-2026-238909 https://cve.radiocsirt.org/vuln/fkie_cve-2024-25700 fkie_cve-2024-25700 2026-10-07T22:15:23.446507+00:00

There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Web App Builder versions 11.1 and below that may allow a remote, authenticated attacker to create a crafted link that is stored in a web map link which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser. The privileges required to execute this attack are high.

 https://cve.radiocsirt.org/vuln/ghsa-c3rj-rhqm-q53c GHSA-c3rj-rhqm-q53c 2026-10-07T22:15:23.446546+00:00

There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Web App Builder versions <= 11.1 that may allow a remote, authenticated attacker to create a crafted link that is stored in a web map link which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser. The privileges required to execute this attack are high.

 https://cve.radiocsirt.org/vuln/gsd-2024-25700 gsd-2024-25700 2026-10-07T22:15:23.446567+00:00 gsd-2024-25700 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0800 WID-SEC-W-2024-0800 — ESRI Portal for ArcGIS: Mehrere Schwachstellen 2026-10-07T22:15:23.446580+00:00

Ein entfernter authentifizierter Angreifer kann mehrere Schwachstellen in ESRI ArcGIS ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder Cross-Site Scripting (XSS)-Angriffe durchzuführen.