组合风险、利用情报和受影响对象,快速定位需要优先处置的漏洞。
| 漏洞与影响对象 | 风险等级 | CVSS | EPSS | 利用情报 | 披露时间 | |
|---|---|---|---|---|---|---|
| GeoServer jsonArrayContains CQL Filter - SQL Injection | 严重 | — | — | PoCEXP | ||
| GeoServer - XML External Entity Injection | 严重 | 9.8 | — | PoCEXP | ||
| GeoServer Demo Request Endpoint - Server Side Request Forgery | 高危 | — | — | PoCEXP | ||
| GeoServer - Missing Authorization on REST API Index | 中危 | 5.3 | — | PoCEXP | ||
| GeoServer WFS - XXE Processing Vulnerability | 严重 | 9.9 | 5.4% | PoCEXP | ||
| GeoServer RCE in Evaluating Property Name Expressions | 严重 | 9.8 | 94.4% | PoCEXP | ||
| GeoServer and GeoTools - Remote Code Execution | 严重 | 9.8 | 85.5% | PoCEXP | ||
| Geoserver Admin - Default Login | 高危 | 8.3 | — | PoCEXP | ||
| GeoServer WPS - Server Side Request Forgery | 严重 | 9.8 | 90.7% | PoCEXP | ||
| GeoServer OGC Filter - SQL Injection | 严重 | 9.8 | 93.8% | PoCEXP | ||
| Geoserver - Server-Side Request Forgery | 高危 | 7.5 | 91.7% | PoCEXP | ||
| GeoServer <1.2.2 - Remote Code Execution | 严重 | 9.8 | 94.2% | PoCEXP |