{"id":"CVE-2021-47795","published":"2026-01-15T23:25:44Z","modified":"2026-04-07T14:06:12Z","title":"GeoVision Geowebserver 5.3.3 - Local FIle Inclusion","vendor":"Geovision","product":"GeoVision Geowebserver","tier":"core","eol":null,"affectedVersions":[{"vendor":"Geovision","product":"GeoVision Geowebserver","versions":["<= 5.3.3"]}],"description":{"text":"GeoVision GeoWebServer 5.3.3 contains multiple vulnerabilities including local file inclusion, cross-site scripting, and remote code execution through improper input sanitization. Attackers can exploit the WebStrings.srf endpoint by manipulating path traversal and injection parameters to access system files and execute malicious scripts.","provenance":"source","from":"CVE.org"},"summary":null,"cvss":{"score":6.2,"severity":"MEDIUM","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.02823,"percentile":0.86566,"date":"2026-10-30","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2026-01-25","exploitedFirstSeen":"2026-01-25","ransomware":false,"evidence":[{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-01-25&host_type=src&vulnerability=cve-2021-47795","date":"2026-01-25"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-01-26&host_type=src&vulnerability=cve-2021-47795","date":"2026-01-26"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-01-29&host_type=src&vulnerability=cve-2021-47795","date":"2026-01-29"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-02-04&host_type=src&vulnerability=cve-2021-47795","date":"2026-02-04"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-02-05&host_type=src&vulnerability=cve-2021-47795","date":"2026-02-05"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-02-12&host_type=src&vulnerability=cve-2021-47795","date":"2026-02-12"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-02-21&host_type=src&vulnerability=cve-2021-47795","date":"2026-02-21"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-02-23&host_type=src&vulnerability=cve-2021-47795","date":"2026-02-23"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-02-25&host_type=src&vulnerability=cve-2021-47795","date":"2026-02-25"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-02-26&host_type=src&vulnerability=cve-2021-47795","date":"2026-02-26"}],"evidenceTotal":110,"provenance":"source"},"exploited":true,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[{"id":"CWE-22","name":"Improper Limitation of a Pathname to a Restricted Directory"}],"references":[{"url":"https://www.exploit-db.com/exploits/50211","tags":["exploit"]},{"url":"https://www.geovision.com.tw/cyber_security.php","tags":["product"]},{"url":"https://www.vulncheck.com/advisories/geovision-geowebserver-local-file-inclusion","tags":["third-party-advisory"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2026-3026","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-3026","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"nuclei":[{"id":"CVE-2021-47795","name":"GeoVision GeoWebServer <= 5.3.3 - Local File Inclusion / Cross-Site Scripting","severity":"high","path":"http/cves/2021/CVE-2021-47795.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-47795.yaml"}],"provenance":"source"},"exploitRefs":["https://www.exploit-db.com/exploits/50211"],"flow":[],"timeline":[{"date":"2026-01-15","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2021-47795","provenance":"source"},{"date":"2026-01-25","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-01-25&host_type=src&vulnerability=cve-2021-47795","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":66.7,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":5.0,"detail":"added 279 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":17.31,"detail":"percentile 0.8657"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 NVD reference tagged Exploit; 1 nuclei template"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":4.34,"detail":"base score 6.2"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}