Skip to content
OpenAdvisories
Medium WID-SEC-2025-2906 1 CVE

ESRI ArcGIS Web AppBuilder: Schwachstelle ermöglicht Manipulation von Dateien

Published Dec 21, 2025 · Updated Dec 21, 2025 · de-DE

Vendor: Esri Product: ArcGIS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in ESRI ArcGIS ausnutzen, um Dateien zu manipulieren.

Product

ArcGIS ist ein Geoinformationssystem.

Vulnerabilities 1

  • Medium 4.7
    CVE-2025-67712

    HTML injection issue in ArcGIS Web App Builder

    There is an HTML injection issue in Esri ArcGIS Web AppBuilder developer edition versions prior to 2.30 that allows a remote, unauthenticated attacker to potentially entice a user to click a link that causes arbitrary HTML to render in a victim's browser. The…

    Esri ArcGIS Web AppBuilder {Developer Edition)

Revision history

  1. #1

    Initiale Fassung

References