geosolutionsgroup records

8 published records for vendor geosolutionsgroup. 1 of them have been exploited in the wild (listed in CISA KEV) and 1 have a ready-made attack tool.

Filter by product ↓

Researcher profile

Entered KEV: 1 · 12.5%
Weaponized: 1 · 12.5%
Pre-auth RCE: 1
With a fix record: 87.5%
Median publish → KEV: 805 days

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

8 records

CVE records
Action	CVE	Vulnerability	Severity	EPSS · Published
100Now	CVE-2022-24816Weaponized	Improper Control of Generation of Code in jai-extgeosolutionsgroup · jai-ext · CWE-94 pre-auth RCE	Critical10.0KEV	99.9%Apr 13, 2022
30Monitor	CVE-2023-40017No exploit	Geonode Server Side Request Forgery vulnerabilitygeosolutionsgroup · geonode · CWE-918 Pre-auth SSRF	High7.5	0.7%Aug 24, 2023
26Monitor	CVE-2023-42439No exploit	GeoNode SSRF Bypass to return internal host datageosolutionsgroup · geonode · CWE-918 SSRF	Medium6.5	0.9%Sep 15, 2023
26Monitor	CVE-2023-26043No exploit	XML External Entity (XXE) injection in GeoServer style upload functionalitygeosolutionsgroup · geonode · CWE-611 XXE	Medium6.5	0.8%Feb 27, 2023
24Monitor	CVE-2024-27091No exploit	GeoNode stored XSS to full account takeovergeosolutionsgroup · geonode · CWE-79 Pre-auth XSS CSRF	Medium6.1	0.3%Mar 27, 2024
21Monitor	CVE-2023-28442No exploit	Geoserver for GeoNode sensitive information leakgeosolutionsgroup · geonode · CWE-200 Pre-auth Info leak	Medium5.3	0.6%Mar 23, 2023
21Monitor	CVE-2026-39921No exploit	GeoNode < 4.4.5, 5.0.2 SSRF via Document Uploadgeosolutionsgroup · geonode · CWE-918 SSRF	Medium5.3	0.2%Apr 10, 2026
21Monitor	CVE-2026-39922No exploit	GeoNode SSRF via Service Registrationgeosolutionsgroup · geonode · CWE-918 SSRF	Medium5.3	0.1%Apr 10, 2026

CVE-2022-24816
100Now
Improper Control of Generation of Code in jai-ext
CriticalCVSS 10.0KEVWeaponizedEPSS 99%
- pre-auth RCE
geosolutionsgroup · jai-extApr 13, 2022
CVE-2023-40017
30Monitor
Geonode Server Side Request Forgery vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- SSRF
geosolutionsgroup · geonodeAug 24, 2023
CVE-2023-42439
26Monitor
GeoNode SSRF Bypass to return internal host data
MediumCVSS 6.5No exploitEPSS 0%
- SSRF
geosolutionsgroup · geonodeSep 15, 2023
CVE-2023-26043
26Monitor
XML External Entity (XXE) injection in GeoServer style upload functionality
MediumCVSS 6.5No exploitEPSS 0%
- XXE
geosolutionsgroup · geonodeFeb 27, 2023
CVE-2024-27091
24Monitor
GeoNode stored XSS to full account takeover
MediumCVSS 6.1No exploitEPSS 0%
geosolutionsgroup · geonodeMar 27, 2024
CVE-2023-28442
21Monitor
Geoserver for GeoNode sensitive information leak
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Info leak
geosolutionsgroup · geonodeMar 23, 2023
CVE-2026-39921
21Monitor
GeoNode < 4.4.5, 5.0.2 SSRF via Document Upload
MediumCVSS 5.3No exploitEPSS 0%
- SSRF
geosolutionsgroup · geonodeApr 10, 2026
CVE-2026-39922
21Monitor
GeoNode SSRF via Service Registration
MediumCVSS 5.3No exploitEPSS 0%
- SSRF
geosolutionsgroup · geonodeApr 10, 2026