CVE-2025-57879: BUG-000171009 - URL manipulation vulnerability in Portal for ArcGIS.
Published Sep 29, 2025
·Updated
There is an unvalidated redirect vulnerability in Esri Portal for ArcGIS 11.4 and below that may allow a remote, unauthenticated attacker to craft a URL that could redirect a victim to an arbitrary website, simplifying phishing attacks.
Affected Software
21 affected components
Esri Portal for ArcGIS<11.4
Esri Portal for ArcGIS=10.9.1
Esri Portal for ArcGIS=10.9.1-security_2025_update1
Esri Portal for ArcGIS=10.9.1-security_2025_update2
Esri Portal for ArcGIS=11.0
Esri Portal for ArcGIS=11.1
Esri Portal for ArcGIS=11.1-security_2024_update1
Esri Portal for ArcGIS=11.1-security_2024_update2
Esri Portal for ArcGIS=11.1-security_2025_update1
Esri Portal for ArcGIS=11.1-security_2025_update2
Esri Portal for ArcGIS=11.2
Esri Portal for ArcGIS=11.2-security_2024_update1
Esri Portal for ArcGIS=11.2-security_2024_update2
Esri Portal for ArcGIS=11.2-security_2025_update1
Esri Portal for ArcGIS=11.2-security_2025_update2
Esri Portal for ArcGIS=11.3
Esri Portal for ArcGIS=11.3-security_2025_update1
Esri Portal for ArcGIS=11.3-security_2025_update2
Esri Portal for ArcGIS=11.4
Esri Portal for ArcGIS=11.4-security_2025_update1
Esri Portal for ArcGIS=11.4-security_2025_update2
Remediation
Event History
Sep 29, 2025
CVE Published
via MITRE·06:33 PM
Data Sourced
via MITRE·06:33 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-57879?
CVE-2025-57879 has a high severity due to the potential for remote attackers to exploit it for phishing attacks.
2
How do I fix CVE-2025-57879?
To fix CVE-2025-57879, update to Esri Portal for ArcGIS version 11.4.1 or higher.
3
What are the potential impacts of CVE-2025-57879?
CVE-2025-57879 may allow attackers to redirect users to harmful sites, increasing the risk of credential theft.
4
Is CVE-2025-57879 exploitable without authentication?
Yes, CVE-2025-57879 can be exploited by remote, unauthenticated attackers.
5
In which versions of Esri Portal for ArcGIS is CVE-2025-57879 found?
CVE-2025-57879 affects Esri Portal for ArcGIS version 11.4 and below.