Read the docs

geoserver

Records34All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high12CVSS 7.0–8.9

Exploited now

geoserver records in CISA KEV
TI-2025-36149 OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability Priority CRITICAL 99KEV 2025-12-11TI-2024-24187 OSGeo GeoServer GeoTools Eval Injection Vulnerability Priority CRITICAL 100KEV 2024-07-15

Components

Products in the NVD configurations · select one to filter the records
Geoserver 17 records CRITICAL Geowebcache 2 records MEDIUM

Records

2 records in Geowebcache · all components

TI-2023-05323 CVE-2023-5786 · GHSA-382v-j99g-hw2p

GeoServer GeoWebCache rest.html direct request

Priority MEDIUM 46

A vulnerability was found in GeoServer GeoWebCache up to 1.15.1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00968 Published 2023-10-26 No fix listed CWE-425
TI-2022-08658 CVE-2022-24846

Unchecked JNDI lookups in GeoWebCache

Priority MEDIUM 44

GeoWebCache is a tile caching server implemented in Java.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01296 Published 2022-04-14 Fixed in 1.20.2, 1.19.3 CWE-20
Open these records in search →