What is the CVSS score of CVE-2023-35042?

CVE-2023-35042 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 43.2%.

Is there a patch available for CVE-2023-35042?

Yes, a patch is available for CVE-2023-35042. Update the affected software to the latest version immediately.

Geoserver CVE-2023-35042

CRITICAL

2023-06-12 cve@mitre.org

RCE Geoserver

9.8

CVSS 3.1 · NVD

View

Vulnerability Assessment

Impact	CVSS score of 9.8 (CRITICAL). Attack characteristics: network attack vector, low complexity, no privileges required, no user interaction not required.
Exploit ScenarioDerived	This vulnerability can be exploited remotely over the network. Successful exploitation could compromise the critical-severity affected system.

Act Now Prioritize within 24-48h. Why: CRITICAL severity.

Patch available 43.2% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAI

GeoServer 2, in some configurations, allows remote attackers to execute arbitrary code via java.lang.Runtime.getRuntime().exec in wps:LiteralData within a wps:Execute request, as exploited in the. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

Affected Packages

maven org.geoserver:gs-wfs fix: 2.18.6, 2.19.6, 2.20.4

maven org.geoserver:gs-wms fix: 2.18.6, 2.19.6, 2.20.4

maven org.geoserver:gs-wps fix: 2.18.6, 2.19.6, 2.20.4

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 3 packages in maven

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Technical ContextAI · show details

GeoServer 2, in some configurations, allows remote attackers to execute arbitrary code via java.lang.Runtime.getRuntime().exec in wps:LiteralData within a wps:Execute request, as exploited in the wild in June 2023. NOTE: the vendor states that they are unable to reproduce this in any version. Affected products include: Geoserver.

Know when Geoserver gets its next vulnerability

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

NVD PRIMARY 9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

DescriptionNVD

GeoServer 2, in some configurations, allows remote attackers to execute arbitrary code via java.lang.Runtime.getRuntime().exec in wps:LiteralData within a wps:Execute request, as exploited in the wild in June 2023. NOTE: the vendor states that they are unable to reproduce this in any version.

Threat Intelligence Overview

EPSS Score

43.2%

Top 1% exploitable

Data Quality

2 sources

Confidence: Low

NVD

CVE.org

EPSS

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity CRITICAL

CISA KEV No

Public POC No

EPSS 43.2%

Patch available Yes

Active threat No

Deciding rule

CRITICAL severity

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived

Scheduled

Exploitation· derived

None

System Exposure· derived

Open

Automatable· derived

Yes

Human Impact· derived

Medium

Priority Score

Low Medium High Critical

KEV: 0

EPSS: +43

CVSS: +49

PoC: 0

Weaponized: 0

Threat intel: 0

Gov advisory: 0

Attack Technique

Remote Code Execution CRITICAL

Remote Code Execution represents the critical moment when an attacker successfully runs arbitrary code on a target system without physical access.

Affected Products (CPE)NVD

cpe:2.3:a:geoserver:geoserver:*:*:*:*:*:*:*:*

More in Geoserver

View all

CVE-2025-58360 CRITICAL Act Now POC

9.8 Nov 25

Unauthenticated XML External Entity processing in GeoServer's WMS GetMap endpoint allows remote attackers to read arbitr

CVE-2024-36401 CRITICAL Act Now POC

9.8 Jul 01

GeoServer is an open source server that allows users to share and edit geospatial data. Rated critical severity (CVSS 9.

CVE-2025-30220 CRITICAL Act Now POC

9.9 Jun 10

A remote code execution vulnerability in GeoServer (CVSS 9.9) that allows users. Risk factors: public PoC available. Ven

CVE-2023-43795 CRITICAL Act Now POC

9.8 Oct 25

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. Rated c

CVE-2023-25157 CRITICAL Act Now POC

9.8 Feb 21

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. Rated c

CVE-2023-5786 HIGH This Week POC

8.8 Oct 26

A vulnerability was found in GeoServer GeoWebCache up to 1.15.1. Rated high severity (CVSS 8.8), this vulnerability is r

CVE-2024-29198 HIGH This Week POC

7.5 Jun 10

GeoServer contains a Server-Side Request Forgery (SSRF) vulnerability in the Demo request endpoint (TestWfsPost servlet)

CVE-2024-23634 MEDIUM This Month POC

6.0 Mar 20

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. Rated m

CVE-2025-27505 MEDIUM This Month POC

5.3 Jun 10

GeoServer is an open source server that allows users to share and edit geospatial data. It is possible to bypass the def

CVE-2024-38524 MEDIUM This Month POC

5.3 Jun 10

GeoServer is an open source server that allows users to share and edit geospatial data. org.geowebcache.GeoWebCacheDispa

CVE-2024-34711 CRITICAL Act Now

9.3 Jun 10

CVE-2024-34711 is an improper URI validation vulnerability in GeoServer that allows unauthenticated attackers to bypass

CVE-2024-35230 MEDIUM This Month POC

5.3 Dec 16

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. Rated m

Same technique RCE

View all

CVE-2021-44228 CRITICAL POC

10.0

CVE-2017-7269 CRITICAL POC

9.8

CVE-2022-47966 CRITICAL POC

9.8

CVE-2012-4681 CRITICAL POC

9.8

CVE-2023-3519 CRITICAL POC

9.8

CVE-2015-5119 CRITICAL POC

9.8

CVE-2016-4117 CRITICAL POC

9.8

CVE-2015-3113 CRITICAL POC

9.8

References

Advisories & patches

REF https://docs.geoserver.org/stable/en/user/services/wps/operations.html#execute REF https://isc.sans.edu/diary/29936

Search Externally

GitHub PoC

Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC

Back