https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 31 May 2026 12:30:15 +0000 https://vulnerability.circl.lu/sighting/a13c74ca-b819-458b-98e4-88be1561c246/export {"uuid": "a13c74ca-b819-458b-98e4-88be1561c246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25835", "type": "seen", "source": "https://t.me/cibsecurity/67082", "content": "\u203c CVE-2023-25835 \u203c\n\nThere is a Cross-site Scripting vulnerability\u00c2\u00a0in Esri Portal Sites in versions 10.8.1 \u00e2\u20ac\u201c 11.1 that may allow a remote, authenticated attacker to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victims browser. \u00c2\u00a0The privileges required to execute this attack are high.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-21T07:33:34.000000Z"} {"uuid": "a13c74ca-b819-458b-98e4-88be1561c246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25835", "type": "seen", "source": "https://t.me/cibsecurity/67082", "content": "\u203c CVE-2023-25835 \u203c\n\nThere is a Cross-site Scripting vulnerability\u00c2\u00a0in Esri Portal Sites in versions 10.8.1 \u00e2\u20ac\u201c 11.1 that may allow a remote, authenticated attacker to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victims browser. \u00c2\u00a0The privileges required to execute this attack are high.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-21T07:33:34.000000Z"} https://vulnerability.circl.lu/sighting/a13c74ca-b819-458b-98e4-88be1561c246/export Fri, 21 Jul 2023 07:33:34 +0000 https://vulnerability.circl.lu/sighting/4b90d9a3-2f73-405a-b9e3-1028ae3ed01e/export {"uuid": "4b90d9a3-2f73-405a-b9e3-1028ae3ed01e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25835", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11303", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-25835\n\ud83d\udd25 CVSS Score: 8.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: There is a stored Cross-site Scripting vulnerability\u00a0in Esri Portal for ArcGIS Sites versions 11.1 and below that may allow a remote, authenticated attacker to create a crafted link that is stored in the site configuration which when clicked could potentially execute arbitrary JavaScript code in the victims browser. \u00a0The privileges required to execute this attack are high. The impact to Confidentiality, Integrity and Availability are High.\n\ud83d\udccf Published: 2023-07-20T23:30:50.190Z\n\ud83d\udccf Modified: 2025-04-10T18:41:52.229Z\n\ud83d\udd17 References:\n1. https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/portal-for-arcgis-enterprise-sites-security-patch-is-now-available/", "creation_timestamp": "2025-04-10T18:49:17.000000Z"} {"uuid": "4b90d9a3-2f73-405a-b9e3-1028ae3ed01e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25835", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11303", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-25835\n\ud83d\udd25 CVSS Score: 8.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: There is a stored Cross-site Scripting vulnerability\u00a0in Esri Portal for ArcGIS Sites versions 11.1 and below that may allow a remote, authenticated attacker to create a crafted link that is stored in the site configuration which when clicked could potentially execute arbitrary JavaScript code in the victims browser. \u00a0The privileges required to execute this attack are high. The impact to Confidentiality, Integrity and Availability are High.\n\ud83d\udccf Published: 2023-07-20T23:30:50.190Z\n\ud83d\udccf Modified: 2025-04-10T18:41:52.229Z\n\ud83d\udd17 References:\n1. https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/portal-for-arcgis-enterprise-sites-security-patch-is-now-available/", "creation_timestamp": "2025-04-10T18:49:17.000000Z"} https://vulnerability.circl.lu/sighting/4b90d9a3-2f73-405a-b9e3-1028ae3ed01e/export Thu, 10 Apr 2025 18:49:17 +0000