A vulnerability described as critical has been identified in Esri ArcGIS Server up to 11.5 on Windows/Linux. Affected is an unknown function. Executing manipulation can lead to unrestricted upload.

This vulnerability is handled as CVE-2025-67707. The attack can be executed remotely. There is not any exploit available.