Geonetwork

2 CVEs product

Monthly

CVE-2022-50899 MEDIUM POC This Month

Geonetwork versions up to 4.2.0 is affected by improper restriction of xml external entity reference (CVSS 6.5).

XXE Geonetwork

NVD Exploit-DB

CVSS 3.1

6.5

EPSS

0.0%

CVE-2025-30220 CRITICAL POC PATCH Act Now

A remote code execution vulnerability in GeoServer (CVSS 9.9) that allows users. Risk factors: public PoC available. Vendor patch is available.

XXE Geonetwork Geotools Geoserver

NVD GitHub

CVSS 3.1

9.9

EPSS

8.4%

CVE-2022-50899

EPSS 0% CVSS 6.5

MEDIUM POC This Month

Geonetwork versions up to 4.2.0 is affected by improper restriction of xml external entity reference (CVSS 6.5).

XXE Geonetwork

NVD Exploit-DB

CVE-2025-30220

EPSS 8% CVSS 9.9

CRITICAL POC PATCH Act Now

A remote code execution vulnerability in GeoServer (CVSS 9.9) that allows users. Risk factors: public PoC available. Vendor patch is available.

XXE Geonetwork Geotools +1

NVD GitHub