Priority CRITICAL 100KEV
GeoServer is an open source server that allows users to share and edit geospatial data.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.99813 · Published 2024-07-01 · Fixed in 2.23.6, 2.24.4 +2 CWE-95
Priority CRITICAL 99KEV
GeoServer is an open source server that allows users to share and edit geospatial data.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.61169 · Published 2025-11-25 · Fixed in 2.26.2, 2.25.6 CWE-611
Priority HIGH 78
GeoServer 2, in some configurations, allows remote attackers to execute arbitrary code via java.lang.Runtime.getRuntime().exec in wps:LiteralData within a wps:Execute request, as exploited in the wild in June 2023.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.44825 · Published 2023-06-12 · Fixed in 2.18.6, 2.19.6 +1
Priority HIGH 67
GeoServer is an open source software server written in Java that allows users to share and edit geospatial data.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01867 · Published 2024-03-20 · Fixed in 2.23.4, 2.24.1 CWE-20
Priority MEDIUM 55
GeoServer is an open source software server written in Java that allows users to share and edit geospatial data.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00426 · Published 2024-03-20 · Fixed in 2.23.2, 2.24.1 CWE-79
Priority MEDIUM 55
GeoServer is an open source software server written in Java that allows users to share and edit geospatial data.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00487 · Published 2024-03-20 · Fixed in 2.23.3 CWE-79
Priority MEDIUM 40
GeoServer is an open source server that allows users to share and edit geospatial data.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00756 · Published 2024-07-01 · Fixed in 2.23.5, 2.24.3 CWE-22
Priority LOW 35
GeoServer is an open source software server written in Java that allows users to share and edit geospatial data.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00841 · Published 2024-03-20 · No fix listed CWE-22
Priority LOW 28
GeoServer is an open source software server written in Java that allows users to share and edit geospatial data.
CVSS 3.1MEDIUM 6.0· Network · High privileges · No interaction · EPSS 0.00694 · Published 2024-03-20 · Fixed in 2.23.5, 2.24.2 CWE-20
Priority LOW 27
GeoServer is an open source server that allows users to share and edit geospatial data.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00317 · Published 2025-11-25 · Fixed in 2.25.0 CWE-79
Priority LOW 25
PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an "in memory buffer," which prevents the reporting of a service exception, with unknown imp…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.00926 · Published 2009-09-14 · No fix listed CWE-119
Priority LOW 23
GeoServer is an open source server that allows users to share and edit geospatial data.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00397 · Published 2024-07-01 · Fixed in 2.24.4, 2.25.1 CWE-200
Priority LOW 22
GeoServer is an open source software server written in Java that allows users to share and edit geospatial data.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00405 · Published 2024-03-20 · Fixed in 2.23.4, 2.24.1 CWE-79
Priority LOW 22
GeoServer is an open source software server written in Java that allows users to share and edit geospatial data.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00426 · Published 2024-03-20 · Fixed in 2.23.4, 2.24.1 CWE-79
Priority LOW 22
GeoServer is an open source software server written in Java that allows users to share and edit geospatial data.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00426 · Published 2024-03-20 · Fixed in 2.23.3, 2.24.1 CWE-79
Priority LOW 22
GeoServer is an open source software server written in Java that allows users to share and edit geospatial data.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00426 · Published 2024-03-20 · Fixed in 2.23.4, 2.24.1 CWE-79
Priority LOW 22
GeoServer is an open source software server written in Java that allows users to share and edit geospatial data.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00426 · Published 2024-03-20 · Fixed in 2.23.3 CWE-79
THREATIST.IORead the docs