geotools
Security Risk Profile
75
/100
highSecurity Risk Score
Comprehensive risk assessment based on 5 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 13, 2022 to present
5
Total CVEs
5
Critical+High
1
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
9.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
75/100
high
⚠️ 1 Active Exploits
Severity Distribution
Critical
4High
1Medium
0Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XEE
1
2
SSRF
1
3
Code Injection
1
4
SQL Injection
1
5
Input Validation
1
Most Affected Products
1. GeoTools GeoTools21
2. maven/org.geoserver:gs-wfs7
3. maven/org.geoserver.web:gs-web-app7
4. OSGeo GeoServer4
5. maven/org.geotools.xsd:gt-xsd-core4
Recent Vulnerabilities
See more →CVE-2025-30220
CVSS 9.9critical
GeoTools, GeoServer, and GeoNetwork XML External Entity (XXE) Processing Vulnerability in XSD schema handling
6/10/2025
CVE-2024-36404
CVSS 9.8critical
GeoTools Remote Code Execution (RCE) vulnerability in evaluating XPath expressions
7/2/2024
CVE-2024-36401
CVSS 9.8critical
Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver
7/1/2024⚠ Exploited
CVE-2023-25158
CVSS 9.8critical
Unfiltered SQL Injection in Geotools
2/21/2023
CVE-2022-24818
CVSS 8.2high
Unchecked JNDI lookups in GeoTools
4/13/2022
Monitor geotools in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.