Read the docs

OSGeo

Records62All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical18CVSS 9.0–10.0
CVSS high25CVSS 7.0–8.9

Exploited now

OSGeo records in CISA KEV
TI-2025-36149 OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability Priority CRITICAL 99KEV 2025-12-11TI-2024-24187 OSGeo GeoServer GeoTools Eval Injection Vulnerability Priority CRITICAL 100KEV 2024-07-15TI-2022-08629 OSGeo GeoServer JAI-EXT Code Injection Vulnerability Priority CRITICAL 100KEV 2024-06-26

Components

Products in the NVD configurations · select one to filter the records
Mapserver 22 records HIGH Geoserver 16 records CRITICAL Gdal 12 records HIGH Geonetwork 4 records HIGH Owslib 2 records MEDIUM Pywps 1 record LOW Shapelib 1 record MEDIUM

Records

16 records in Geoserver · all components

TI-2023-10619 CVE-2023-25157 · GHSA-7g5f-wrx8-5ccf

Unfiltered SQL Injection Vulnerabilities in Geoserver

Priority CRITICAL 90

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.85247 Published 2023-02-21 Fixed in 2.22.2, 2.21.4 CWE-89
TI-2023-23486 CVE-2023-43795 · GHSA-5pr3-m5hm-9956

WPS Server Side Request Forgery in GeoServer

Priority CRITICAL 85

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.69028 Published 2023-10-24 Fixed in 2.22.5, 2.23.2 CWE-918
TI-2024-19367 CVE-2024-29198 · GHSA-5gw5-jccf-6hxw

GeoServer Vulnerable to Unauthenticated SSRF via TestWfsPost

Priority MEDIUM 40

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.02321 Published 2025-06-10 Fixed in 2.24.4, 2.25.2 CWE-918
TI-2022-08659 CVE-2022-24847 · GHSA-4pm3-f52j-8ggh

Improper Input Validation in GeoServer

Priority LOW 37

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0156 Published 2022-04-13 Fixed in 2.20.4, 2.19.6 CWE-20
TI-2025-20337 CVE-2025-27505 · GHSA-h86g-x8mm-78m5

GeoServer Missing Authorization on REST API Index

Priority LOW 32

GeoServer is an open source server that allows users to share and edit geospatial data.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01165 Published 2025-06-10 Fixed in 2.26.3, 2.25.6 CWE-862
Open these records in search →