geoserver kayıtları

geoserver üreticisine ait 19 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 2 · %10,5
Silahlaştırılmış: 2 · %10,5
Pre-auth RCE: 3
Düzeltme kaydı olan: %84,2
Yayından KEV’e ortanca: 15 gün

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

19 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
99Hemen	CVE-2024-36401Silahlaştırılmış	Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoservergeoserver · geoserver · CWE-95 Girişsiz RCE	Kritik9,8	KEV	%99,8	1 Tem 2024
87Hemen	CVE-2025-58360Silahlaştırılmış	GeoServer is vulnerable to an Unauthenticated XML External Entities (XXE) attack via WMS GetMap featuregeoserver · geoserver · CWE-611 Kimlik doğrulamasız XXE	Kritik9,8	KEV	%61,1	25 Kas 2025
52Planlayın	CVE-2023-35042İstismar yok	GeoServer 2, in some configurations, allows remote attackers to execute arbitrary code via java.lang.Runtime.getRuntime().exec in wps:Literageoserver · geoserver Girişsiz RCE	Kritik9,8	—	%44,8	12 Haz 2023
35İzleyin	CVE-2023-5786İstismar yok	GeoServer GeoWebCache rest.html direct requestgeoserver · geowebcache · CWE-425	Yüksek8,8	—	%0,9	26 Eki 2023
30İzleyin	CVE-2024-24749İstismar yok	Classpath resource disclosure in GWC Web Resource API on Windows / Tomcatgeoserver · geoserver · CWE-22 Kimlik doğrulamasız Yol geçişi	Yüksek7,5	—	%0,7	1 Tem 2024
29İzleyin	CVE-2023-51444Kavram kanıtı	GeoServer arbitrary file upload vulnerability in REST Coverage Store APIgeoserver · geoserver · CWE-20 RCE Yol geçişi Dosya yükleme	Yüksek7,2	—	%1,8	20 Mar 2024
28İzleyin	CVE-2022-24846İstismar yok	Unchecked JNDI lookups in GeoWebCachegeoserver · geowebcache · CWE-20 RCE Deserializasyon	Yüksek7,2	—	%1,2	14 Nis 2022
28İzleyin	CVE-2023-41877İstismar yok	GeoServer log file path traversal vulnerabilitygeoserver · geoserver · CWE-22 Yol geçişi	Yüksek7,2	—	%0,8	20 Mar 2024
24İzleyin	CVE-2024-23634İstismar yok	GeoServer arbitrary file renaming vulnerability in REST Coverage/Data Store APIgeoserver · geoserver · CWE-20	Orta6,0	—	%0,6	20 Mar 2024
24İzleyin	CVE-2025-21621İstismar yok	GeoServer Reflected Cross-Site Scripting (XSS) vulnerability in WMS GetFeatureInfo HTML formatgeoserver · geoserver · CWE-79 Girişsiz RCE XSS	Orta6,1	—	%0,3	25 Kas 2025
20İzleyin	CVE-2008-7227İstismar yok	PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an "in memorgeoserver · geoserver · CWE-119 Kimlik doğrulamasız Bellek hatası Hizmet dışı bırakma	Orta5,0	—	%0,9	14 Eyl 2009
19İzleyin	CVE-2023-51445İstismar yok	GeoServer Stored Cross-Site Scripting (XSS) vulnerability in REST Resources APIgeoserver · geoserver · CWE-79 XSS	Orta4,8	—	%0,4	20 Mar 2024
19İzleyin	CVE-2024-23819İstismar yok	GeoServer Stored Cross-Site Scripting (XSS) vulnerability in MapML HTML Pagegeoserver · geoserver · CWE-79 XSS	Orta4,8	—	%0,4	20 Mar 2024
19İzleyin	CVE-2024-23643İstismar yok	GeoServer Stored Cross-Site Scripting (XSS) vulnerability in GWC Seed Formgeoserver · geoserver · CWE-79 XSS	Orta4,8	—	%0,4	20 Mar 2024
19İzleyin	CVE-2024-23818İstismar yok	GeoServer Stored Cross-Site Scripting (XSS) vulnerability in WMS OpenLayers Formatgeoserver · geoserver · CWE-79 XSS	Orta4,8	—	%0,4	20 Mar 2024
19İzleyin	CVE-2024-23642İstismar yok	GeoServer Stored Cross-Site Scripting (XSS) vulnerability in Simple SVG Renderergeoserver · geoserver · CWE-79 XSS	Orta4,8	—	%0,4	20 Mar 2024
19İzleyin	CVE-2024-23640İstismar yok	GeoServer Stored Cross-Site Scripting (XSS) vulnerability in Style Publishergeoserver · geoserver · CWE-79 XSS	Orta4,8	—	%0,4	20 Mar 2024
19İzleyin	CVE-2024-23821İstismar yok	GeoServer's GWC Demos Page vulnerable to Stored Cross-Site Scripting (XSS)geoserver · geoserver · CWE-79 XSS	Orta4,8	—	%0,4	20 Mar 2024
19İzleyin	CVE-2024-34696İstismar yok	GeoServer's Server Status shows sensitive environmental variables and Java propertiesgeoserver · geoserver · CWE-200 Bilgi sızıntısı	Orta4,9	—	%0,3	1 Tem 2024

CVE-2024-36401
99Hemen
Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99
- Girişsiz RCE
geoserver · geoserver1 Tem 2024
CVE-2025-58360
87Hemen
GeoServer is vulnerable to an Unauthenticated XML External Entities (XXE) attack via WMS GetMap feature
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %61
- Kimlik doğrulamasız
- XXE
geoserver · geoserver25 Kas 2025
CVE-2023-35042
52Planlayın
GeoServer 2, in some configurations, allows remote attackers to execute arbitrary code via java.lang.Runtime.getRuntime().exec in wps:Litera
KritikCVSS 9,8İstismar yokEPSS %44
- Girişsiz RCE
geoserver · geoserver12 Haz 2023
CVE-2023-5786
35İzleyin
GeoServer GeoWebCache rest.html direct request
YüksekCVSS 8,8İstismar yokEPSS %0
geoserver · geowebcache26 Eki 2023
CVE-2024-24749
30İzleyin
Classpath resource disclosure in GWC Web Resource API on Windows / Tomcat
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Yol geçişi
geoserver · geoserver1 Tem 2024
CVE-2023-51444
29İzleyin
GeoServer arbitrary file upload vulnerability in REST Coverage Store API
YüksekCVSS 7,2Kavram kanıtıEPSS %1
geoserver · geoserver20 Mar 2024
CVE-2022-24846
28İzleyin
Unchecked JNDI lookups in GeoWebCache
YüksekCVSS 7,2İstismar yokEPSS %1
- RCE
- Deserializasyon
geoserver · geowebcache14 Nis 2022
CVE-2023-41877
28İzleyin
GeoServer log file path traversal vulnerability
YüksekCVSS 7,2İstismar yokEPSS %0
- Yol geçişi
geoserver · geoserver20 Mar 2024
CVE-2024-23634
24İzleyin
GeoServer arbitrary file renaming vulnerability in REST Coverage/Data Store API
OrtaCVSS 6,0İstismar yokEPSS %0
geoserver · geoserver20 Mar 2024
CVE-2025-21621
24İzleyin
GeoServer Reflected Cross-Site Scripting (XSS) vulnerability in WMS GetFeatureInfo HTML format
OrtaCVSS 6,1İstismar yokEPSS %0
- Girişsiz RCE
- XSS
geoserver · geoserver25 Kas 2025
CVE-2008-7227
20İzleyin
PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an "in memor
OrtaCVSS 5,0İstismar yokEPSS %0
geoserver · geoserver14 Eyl 2009
CVE-2023-51445
19İzleyin
GeoServer Stored Cross-Site Scripting (XSS) vulnerability in REST Resources API
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
geoserver · geoserver20 Mar 2024
CVE-2024-23819
19İzleyin
GeoServer Stored Cross-Site Scripting (XSS) vulnerability in MapML HTML Page
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
geoserver · geoserver20 Mar 2024
CVE-2024-23643
19İzleyin
GeoServer Stored Cross-Site Scripting (XSS) vulnerability in GWC Seed Form
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
geoserver · geoserver20 Mar 2024
CVE-2024-23818
19İzleyin
GeoServer Stored Cross-Site Scripting (XSS) vulnerability in WMS OpenLayers Format
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
geoserver · geoserver20 Mar 2024
CVE-2024-23642
19İzleyin
GeoServer Stored Cross-Site Scripting (XSS) vulnerability in Simple SVG Renderer
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
geoserver · geoserver20 Mar 2024
CVE-2024-23640
19İzleyin
GeoServer Stored Cross-Site Scripting (XSS) vulnerability in Style Publisher
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
geoserver · geoserver20 Mar 2024
CVE-2024-23821
19İzleyin
GeoServer's GWC Demos Page vulnerable to Stored Cross-Site Scripting (XSS)
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
geoserver · geoserver20 Mar 2024
CVE-2024-34696
19İzleyin
GeoServer's Server Status shows sensitive environmental variables and Java properties
OrtaCVSS 4,9İstismar yokEPSS %0
- Bilgi sızıntısı
geoserver · geoserver1 Tem 2024