Find a vulnerability

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

Related vulnerabilities

NCSC-2026-0343

Vulnerability from csaf_ncscnl - Published: 2026-09-07 12:00 - Updated: 2026-09-07 12:00

Summary

Kwetsbaarheden verholpen in GeoNetwork door OpenGeo

Scope

3 vulnerabilities in this advisory, including CVE-2026-57582.

CVE-2026-57582

GeoNetwork versions 4.4.5 through 4.4.11 contain a reflected cross-site scripting (XSS) vulnerability in the public unauthenticated catalog search due to improper sanitization of the uiconfig query parameter, enabling arbitrary JavaScript execution.

8.2 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

Known affected: 2 products

Open the full advisory