https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T03:39:21.214759+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-228566 EUVD-2026-228566 2026-10-08T03:39:21.296267+00:00 EUVD-2026-228566 https://cve.radiocsirt.org/vuln/fkie_cve-2024-25708 fkie_cve-2024-25708 2026-10-08T03:39:21.296314+00:00

There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Web App Builder versions 10.9.1 and below that may allow a remote, authenticated attacker to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser. The privileges required to execute this attack are high.

 https://cve.radiocsirt.org/vuln/ghsa-43fc-v55w-5mx4 GHSA-43fc-v55w-5mx4 2026-10-08T03:39:21.296368+00:00

There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Web App Builder versions 10.8.1 – 10.9.1 that may allow a remote, authenticated attacker to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser. The privileges required to execute this attack are high.

 https://cve.radiocsirt.org/vuln/gsd-2024-25708 gsd-2024-25708 2026-10-08T03:39:21.296402+00:00 gsd-2024-25708 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0800 WID-SEC-W-2024-0800 — ESRI Portal for ArcGIS: Mehrere Schwachstellen 2026-10-08T03:39:21.296421+00:00

Ein entfernter authentifizierter Angreifer kann mehrere Schwachstellen in ESRI ArcGIS ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder Cross-Site Scripting (XSS)-Angriffe durchzuführen.