OSGeo

Records62All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical18CVSS 9.0–10.0

CVSS high25CVSS 7.0–8.9

Exploited now

OSGeo records in CISA KEV

TI-2025-36149 OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability CRITICAL 99KEV 2025-12-11 TI-2024-24187 OSGeo GeoServer GeoTools Eval Injection Vulnerability CRITICAL 100KEV 2024-07-15 TI-2022-08629 OSGeo GeoServer JAI-EXT Code Injection Vulnerability CRITICAL 100KEV 2024-06-26

Components

Products in the NVD configurations · select one to filter the records

Mapserver 22 records HIGH Geoserver 16 records CRITICAL Gdal 12 records HIGH Geonetwork 4 records HIGH Owslib 2 records MEDIUM Pywps 1 record LOW Shapelib 1 record MEDIUM

Records

62 records

TI-2024-24187 CVE-2024-36401 · GHSA-6jj6-gm7p-fcvv

Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver

CRITICAL 100KEV

GeoServer is an open source server that allows users to share and edit geospatial data.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99813 Published 2024-07-01 Fixed in 2.23.6, 2.24.4 +2 CWE-95

TI-2022-08629 CVE-2022-24816 · GHSA-v92f-jx6p-73rx

Improper Control of Generation of Code in jai-ext

CRITICAL 100KEV

JAI-EXT is an open-source project which aims to extend the Java Advanced Imaging (JAI) API.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.99929 Published 2022-04-13 Fixed in 1.1.22 CWE-94

TI-2025-36149 CVE-2025-58360 · GHSA-fjf5-xgmq-5525

GeoServer is vulnerable to an Unauthenticated XML External Entities (XXE) attack via WMS GetMap feature

CRITICAL 99KEV

GeoServer is an open source server that allows users to share and edit geospatial data.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.61169 Published 2025-11-25 Fixed in 2.26.2, 2.25.6 CWE-611

TI-2023-10619 CVE-2023-25157 · GHSA-7g5f-wrx8-5ccf

Unfiltered SQL Injection Vulnerabilities in Geoserver

CRITICAL 90

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.85247 Published 2023-02-21 Fixed in 2.22.2, 2.21.4 CWE-89

TI-2023-23486 CVE-2023-43795 · GHSA-5pr3-m5hm-9956

WPS Server Side Request Forgery in GeoServer

CRITICAL 85

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.69028 Published 2023-10-24 Fixed in 2.22.5, 2.23.2 CWE-918

TI-2025-36983 CVE-2025-59431

MapServer - WFS XML Filter Query SQL injection

HIGH 80

MapServer is a system for developing web-based GIS applications.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00415 Published 2025-09-19 Fixed in 8.4.1 CWE-89

TI-2025-21556 CVE-2025-30220 · GHSA-jj54-8f66-c5pc

GeoTools, GeoServer, and GeoNetwork XML External Entity (XXE) Processing Vulnerability in XSD schema handling

HIGH 77

GeoServer is an open source server that allows users to share and edit geospatial data.

CVSS 3.1CRITICAL 9.9 Network No auth No interaction EPSS 0.43616 Published 2025-06-10 Fixed in 2.27.1, 2.26.3 +1 CWE-611

TI-2026-26100 CVE-2026-33721

MapServer has heap buffer overflow in SLD `Categorize` Threshold parsing

HIGH 72

MapServer is a system for developing web-based GIS applications.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0122 Published 2026-03-27 Fixed in 8.6.1 CWE-787

TI-2026-36264 CVE-2026-49014 · GHSA-wphc-7cm7-8mf7

Stack-based buffer overflow in GDAL

HIGH 69

In GDAL 3.1.0 through 3.13.0, scanForGeometryContainers in the netCDF driver allows code execution via a stack-based buffer overflow.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00102 Published 2026-05-27 Fixed in 3.13.1 CWE-121

TI-2024-23300 CVE-2024-35230 · GHSA-6pfc-w86r-54q6

Welcome and About GeoServer pages communicate version and revision information

MEDIUM 63

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00697 Published 2024-12-16 Fixed in 2.26.0, 2.25.1 CWE-200

TI-2026-30409 CVE-2026-42030

MapServer: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in OpenLayers viewer

MEDIUM 60

MapServer is a system for developing web-based GIS applications.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00247 Published 2026-05-08 Fixed in 8.6.2 CWE-80

TI-2025-21099 CVE-2025-29480 · GHSA-p7jp-69j5-crrv

Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of…

MEDIUM 58

Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00235 Published 2025-04-07 No fix listed CWE-120

TI-2026-39247 CVE-2026-54355

MapServer: Reflected XSS in OpenLayers HTML Output via `HTTP_X_FORWARDED_HOST`

MEDIUM 57

MapServer is a system for developing web-based GIS applications.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.005 Published 2026-09-17 Fixed in 8.6.4 CWE-79

TI-2026-07234 CVE-2026-8213 · GHSA-8q76-c96g-j64j

OSGeo gdal Grid File GDapi.c GDSDfldsrch heap-based overflow

MEDIUM 55

A vulnerability has been found in OSGeo gdal up to 3.13.0dev-4.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00258 Published 2026-05-09 Fixed in 3.13.0RC1 CWE-119

TI-2026-07233 CVE-2026-8212 · GHSA-r5m4-5vww-w9f5

OSGeo gdal SWapi.c SWSDfldsrch heap-based overflow

MEDIUM 55

A flaw has been found in OSGeo gdal up to 3.13.0dev-4.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00205 Published 2026-05-09 Fixed in 3.13.0RC1 CWE-119

TI-2026-07126 CVE-2026-8088 · GHSA-j3f5-rw74-g4rv

OSGeo gdal GDapi.c GDfieldinfo out-of-bounds

MEDIUM 55

A weakness has been identified in OSGeo gdal up to 3.13.0dev-4.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00246 Published 2026-05-07 Fixed in 3.13.0RC1, 3.13.0 CWE-119

TI-2026-07125 CVE-2026-8087 · GHSA-h9rh-5ffh-h669

OSGeo gdal GDapi.c GDnentries heap-based overflow

MEDIUM 55

A security flaw has been discovered in OSGeo gdal up to 3.13.0dev-4.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00223 Published 2026-05-07 Fixed in 3.13.0RC1, 3.13.0 CWE-119

TI-2026-07124 CVE-2026-8086 · GHSA-72pg-5w29-wjx6

OSGeo gdal SWapi.c SWnentries heap-based overflow

MEDIUM 55

A vulnerability was identified in OSGeo gdal up to 3.13.0dev-4.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00237 Published 2026-05-07 Fixed in 3.12.4RC1 CWE-119

TI-2026-07122 CVE-2026-8084 · GHSA-jmvp-7877-wr2f

OSGeo gdal HDF-EOS Grid File SWapi.c memmove out-of-bounds

MEDIUM 55

A vulnerability was determined in OSGeo gdal up to 3.13.0dev-4.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00264 Published 2026-05-07 Fixed in 3.13.0RC1 CWE-119

TI-2009-00797 CVE-2009-0839 · GHSA-9r5g-wj95-f57q

Stack-based buffer overflow in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and…

MEDIUM 54

Stack-based buffer overflow in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when the server has a map with a long IMAGEPATH or NAME attribute, allows remote attackers to execute arbitrary cod…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.09011 Published 2009-03-31 No fix listed CWE-119

TI-2022-00613 CVE-2022-0699 · GHSA-j5p4-42cc-2j44

Use after free in shapelib

MEDIUM 52

A double-free condition exists in contrib/shpsort.c of shapelib 1.5.0 and older releases.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0166 Published 2022-10-17 No fix listed CWE-416

TI-2009-02173 CVE-2009-2281 · GHSA-6726-5cj2-9h6f

Multiple heap-based buffer underflows in the readPostBody function in cgiutil.c in…

MEDIUM 52

Multiple heap-based buffer underflows in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x through 4.10.4 and 5.x before 5.4.2 allow remote attackers to execute arbitrary code via (1) a crafted Content-L…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05949 Published 2009-10-23 No fix listed CWE-119

TI-2021-17747 CVE-2021-40822 · GHSA-rr33-j5p5-ppf8

GeoServer through 2.18.5 and 2.19.x through 2.19.2 allows SSRF via the option for setting a proxy host.

MEDIUM 51

GeoServer through 2.18.5 and 2.19.x through 2.19.2 allows SSRF via the option for setting a proxy host.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.19259 Published 2022-05-01 No fix listed CWE-918

TI-2009-00799 CVE-2009-0841 · GHSA-jrh8-99hv-m6mp

Directory traversal vulnerability in mapserv.c in mapserv in MapServer 4.x before 4.10.4…

MEDIUM 51

Directory traversal vulnerability in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when running on Windows with Cygwin, allows remote attackers to create arbitrary files via a ..

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05276 Published 2009-03-31 No fix listed CWE-22

TI-2009-00798 CVE-2009-0840 · GHSA-53rh-gvx6-42x8

Heap-based buffer underflow in the readPostBody function in cgiutil.c in mapserv in…

MEDIUM 51

Heap-based buffer underflow in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to have an unknown impact via a negative value in the Content-L…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05283 Published 2009-03-31 No fix listed CWE-119

Open these records in search →