Vulnerabilidades em GeoNetwork

8 resultados

Análise Vexday

GeoNetwork apresenta postura de risco baixa com apenas 1 vulnerabilidade registrada na base, nenhuma sob exploração ativa conhecida e nenhuma crítica. A fraqueza documentada (CWE-611 - XML External Entity Injection) é moderada e não representa ameaça imediata, sendo a vulnerabilidade anterior aos últimos 90 dias.

CVE-2026-55864HIGHGeoNetwork: Unauthenticaded Server-Side Request Forgery in SLD ToolEPSS 1.4%CVE-2026-58400CRITICALGeoNetwork vulnerable to Remote Code Execution via unsafe Saxon XSLT processor configuration in formatterEPSS 1.2%CVE-2026-53573MEDIUMcore-geonetwork has an Open Redirect BypassEPSS 0.6%CVE-2022-50899HIGHGeonetwork 4.2.0 - XML External Entity (XXE)EPSS 0.6%CVE-2026-63219HIGHUnauthenticated file upload via missing authorization on formatter upload endpointEPSS 0.5%CVE-2026-46487HIGHGeoNetwork: ACL bypass on Elasticsearch search when request body omits query fieldEPSS 0.5%CVE-2024-32037NONEGeoNetwork vulnerable to search end-point information disclosure in response headersEPSS 0.4%CVE-2026-39379HIGHGeoNetwork: Reflected XSS through client-side template injectionEPSS 0.4%