CVE-2024-25693
CVSS 3.1 Score 9.9 of 10 (high)
Details
Published Apr 4, 2024
Updated: Jan 8, 2025
CWE ID 22
Summary
CVE-2024-25693 is a path traversal vulnerability affecting Esri Portal for ArcGIS versions prior to 11.3. This issue permits a remote, authenticated attacker to access files or execute code outside of the intended directory by manipulating file paths. Successfully exploiting this vulnerability could result in serious data breaches or system compromise. It is highly recommended that affected organizations upgrade to the latest version of Esri Portal for ArcGIS to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Portal for ArcGIS
- Esri Portal for ArcGIS
Affected Vendors
- Esri