CVE-2024-25706

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-25706
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because this item is scheduled to be patched at a future time.
CVSS

No CVSS.

References

No reference.

Configurations

No configuration.

History

25 Apr 2024, 19:15

Type Values Removed Values Added
CWE CWE-94
CVSS v2 : unknown
v3 : 6.1 		v2 : unknown
v3 : unknown
Summary (en) There is an HTML injection vulnerability in Esri Portal for ArcGIS <=11.0 that may allow a remote, unauthenticated attacker to craft a URL which, when clicked, could potentially generate a message that may entice an unsuspecting victim to visit an arbitrary website. This could simplify phishing attacks. (en) Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because this item is scheduled to be patched at a future time.
References
  • {'url': 'https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/portal-for-arcgis-security-2024-update-2/', 'source': 'psirt@esri.com'}

04 Apr 2024, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-04 18:15

Updated : 2024-04-25 19:15

NVD link : CVE-2024-25706

Mitre link : CVE-2024-25706

CVE.ORG link : CVE-2024-25706

JSON object : View

Products Affected

No product.

CWE

No CWE.