Known vulnerabilities in geotools

Vendor: geotools
Software: geotools
Software CPE: cpe:2.3:a:geotools:geotools:*:*:*:*:*:*:*:*
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting geotools geotools is affected by 4 known vulnerabilities: 1 critical, 2 high, 1 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU142660 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 Critical
No
Exploited
33.6, 34.5, 35.1 15.08.2026 SB2026081518
SB2026081520
#VU105786 - Eval Injection
CVE-2024-36404
CWE-95 High
No
No
28.6, 29.6, 30.4, 31.2 17.03.2025 SB2025031743
SB2025031744
#VU142658 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-25158
CWE-89 High
No
No
24.7, 25.7, 26.7, 27.4, 28.2 21.02.2023 SB20230221102
#VU142659 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2022-24818
CWE-74 Low
No
No
24.6, 25.6, 26.4, 27.0 13.04.2022 SB2022041379