Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Critical9.8OSGeo GeoServer Improper Restriction of XML External Entity Reference VulnerabilityCVE-2025-58360 · OSGeo · GeoServer · CISA KEV · CVE.org · FIRST EPSS · GeoServerKEVEPSS 60.5%Nov 25, 2025
Critical9.8OSGeo GeoServer GeoTools Eval Injection VulnerabilityCVE-2024-36401 · geoserver · geoserver · CISA KEV · CVE.org · FIRST EPSS · GeoServerKEVEPSS 99.8%Jul 1, 2024
Critical10.0OSGeo GeoServer JAI-EXT Code Injection VulnerabilityCVE-2022-24816 · geosolutionsgroup · jai-ext · CISA KEV · CVE.org · FIRST EPSS · GeoServerKEVEPSS 99.9%Apr 13, 2022