Vulnerabilities

TI-2025-21556 CVE-2025-30220 · GHSA-jj54-8f66-c5pc

GeoTools, GeoServer, and GeoNetwork XML External Entity (XXE) Processing Vulnerability in XSD schema handling

HIGH 77

GeoServer is an open source server that allows users to share and edit geospatial data.

CVSS 3.1CRITICAL 9.9 Network No auth No interaction EPSS 0.43616 Published 2025-06-10 Fixed in 2.27.1, 2.26.3 +1 CWE-611

TI-2024-24187 CVE-2024-36401 · GHSA-6jj6-gm7p-fcvv

CRITICAL 100KEV

GeoServer is an open source server that allows users to share and edit geospatial data.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99813 Published 2024-07-01 Fixed in 2.23.6, 2.24.4 +2 CWE-95

TI-2023-10620 CVE-2023-25158 · GHSA-99c3-qc2q-p94m

MEDIUM 51

GeoTools is an open source Java library that provides tools for geospatial data.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01095 Published 2023-02-21 Fixed in 28.2, 27.4 +3 CWE-89

TI-2022-08631 CVE-2022-24818

MEDIUM 42

GeoTools is an open source Java library that provides tools for geospatial data.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.0241 Published 2022-04-13 Fixed in 26.4, 25.6 +1 CWE-20