Vulnerabilities in GeoNetwork

6 results

Vexday analysis

GeoNetwork apresenta postura de risco baixa com apenas 1 vulnerabilidade registrada na base, nenhuma sob exploração ativa conhecida e nenhuma crítica. A fraqueza documentada (CWE-611 - XML External Entity Injection) é moderada e não representa ameaça imediata, sendo a vulnerabilidade anterior aos últimos 90 dias.

CVE-2026-58400CRITICALGeoNetwork vulnerable to Remote Code Execution via unsafe Saxon XSLT processor configuration in formatterEPSS 1.2%CVE-2026-55864HIGHGeoNetwork: Unauthenticaded Server-Side Request Forgery in SLD ToolEPSS 0.6%CVE-2022-50899HIGHGeonetwork 4.2.0 - XML External Entity (XXE)EPSS 0.5%CVE-2026-63219HIGHUnauthenticated file upload via missing authorization on formatter upload endpointEPSS 0.5%CVE-2024-32037NONEGeoNetwork vulnerable to search end-point information disclosure in response headersEPSS 0.4%CVE-2026-53573MEDIUMcore-geonetwork has an Open Redirect BypassEPSS 0.4%