Priority LOW 31
GeoNetwork is a catalog application to manage spatially referenced resources.
Vulnerabilities
9 records
Priority LOW 39
GeoNetwork is a catalog application to manage spatially referenced resources.
TI-2026-40323 CVE-2026-55864 · GHSA-5hx7-j24v-rffj
GeoNetwork: Unauthenticaded Server-Side Request Forgery in SLD Tool
Priority MEDIUM 43
GeoNetwork is a catalog application to manage spatially referenced resources.
TI-2026-45097 CVE-2026-63219
Unauthenticated file upload via missing authorization on formatter upload endpoint
Priority MEDIUM 44
GeoNetwork is a catalog application to manage spatially referenced resources.
TI-2026-42016 CVE-2026-58400
GeoNetwork vulnerable to Remote Code Execution via unsafe Saxon XSLT processor configuration in formatter
Priority MEDIUM 44
GeoNetwork is a catalog application to manage spatially referenced resources.
TI-2026-38636 CVE-2026-53573 · GHSA-pjp7-q6wp-97qx
core-geonetwork has an Open Redirect Bypass
Priority LOW 23
GeoNetwork is a catalog application to manage spatially referenced resources.
TI-2022-26353 CVE-2022-50899 · GHSA-q595-r7rh-mc9h
Geonetwork 4.2.0 - XML External Entity (XXE)
Priority MEDIUM 44
Geonetwork 3.10 through 4.2.0 contains an XML external entity vulnerability in PDF rendering that allows attackers to retrieve arbitrary files from the server.
TI-2024-21128 CVE-2024-32037 · GHSA-52rf-25hq-5m33
GeoNetwork vulnerable to search end-point information disclosure in response headers
Priority LOW 30
GeoNetwork is a catalog application to manage spatially referenced resources.
TI-2006-05324 CVE-2006-5513 · GHSA-c5c5-98w5-w383
SQL injection vulnerability in GeoNetwork opensource before 2.0.3 allows remote attackers…
Priority LOW 35
SQL injection vulnerability in GeoNetwork opensource before 2.0.3 allows remote attackers to execute arbitrary SQL commands, and complete a login, via unspecified vectors.