CVE-2025-4967

Server Side Request Forgery (SSRF) vulnerability in Portal for ArcGIS PUBLISHED

Description (CNA)

Esri Portal for ArcGIS 11.4 and prior allows a remote, unauthenticated attacker to bypass the Portal’s SSRF protections.

Vendor / product	Versions
Esri / Portal for ArcGIS	affected 0 through 11.4

CWE-918

CISA-ADP

No English description supplied.

No references supplied.