A vulnerability categorized as problematic has been discovered in Esri ArcGIS Server up to 11.4 on Windows/Linux. The affected element is an unknown function of the component Configuration Handler. The manipulation results in cross site scripting.
This vulnerability is reported as CVE-2025-67710. The attack can be launched remotely. No exploit exists.
