OSGeo
CVEs currently on EVULNABLE's Priority Feed for OSGeo, and this vendor's own CISA KEV history.
In EVULNABLE's ranked feed
Showing all 3 OSGeo CVEs in EVULNABLE's ranked feed.
#1 87 Immediate CVE-2022-24816 ExigentKEV since 2024 · listed over a yearCISA KEV OSGeo — OSGeo GeoServer JAI-EXT Code Injection Vulnerability KEV, EPSS 99.9%
EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.999.
#2 87 Immediate CVE-2024-36401 ExigentKEV since 2024 · listed over a yearCISA KEV OSGeo — OSGeo GeoServer GeoTools Eval Injection Vulnerability KEV, EPSS 99.8%
EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.998.
#3 79 Urgent CVE-2025-58360 CISA federal deadline · Overdue by 9 monthsCISA KEV OSGeo — OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability KEV, EPSS 60.5%
EVRS 79/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.605.