GE
Product
geoserver
On CISA KEVExploited in the wild
17
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 3Medium 10Low 0
Watch
Add geoserver to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-58360 In wildKEV | 9.8 | Nov 25 | GeoServer is vulnerable to an Unauthenticated XML External Entities (XXE) attack via WMS GetMap feature Affected: >= 2.26.0, < 2.26.2; < 2.25.6 |
| CVE-2024-36401 In wildKEV | 9.8 | Jul 1 | Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver Affected: >= 2.23.0, < 2.23.6; >= 2.24.0, < 2.24.4; >= 2.25.0, < 2.25.2; < 2.22.6 |
| CVE-2023-35042 | 9.8 | Jun 12 | GeoServer 2, in some configurations, allows remote attackers to execute arbitrary code via java.lang.Runtime.getRuntime().exec in wps:LiteralData within a wps:Execute request, as… Affected: 2.0.0 and later |
| CVE-2024-24749 | 7.5 | Jul 1 | GeoServer is an open source server that allows users to share and edit geospatial data Affected: before 2.23.5; 2.24.0 before 2.24.3 |
| CVE-2023-51444 | 7.2 | Mar 20 | GeoServer is an open source software server written in Java that allows users to share and edit geospatial data Affected: before 2.23.4; 2.24.0 |
| CVE-2023-41877 | 7.2 | Mar 20 | GeoServer is an open source software server written in Java that allows users to share and edit geospatial data Affected: through 2.23.4 |
| CVE-2025-21621 | 6.1 | Nov 25 | GeoServer is an open source server that allows users to share and edit geospatial data Affected: before 2.25.0 |
| CVE-2024-23634 | 6.0 | Mar 20 | GeoServer is an open source software server written in Java that allows users to share and edit geospatial data Affected: before 2.23.5; 2.24.0 before 2.24.2 |
| CVE-2024-34696 | 4.9 | Jul 1 | GeoServer is an open source server that allows users to share and edit geospatial data Affected: 2.10.0 before 2.24.4; 2.25.0 before 2.25.1 |
| CVE-2024-23821 | 4.8 | Mar 20 | GeoServer is an open source software server written in Java that allows users to share and edit geospatial data Affected: before 2.23.4; 2.24.0 |
| CVE-2024-23819 | 4.8 | Mar 20 | GeoServer is an open source software server written in Java that allows users to share and edit geospatial data Affected: before 2.23.4; 2.24.0 |
| CVE-2024-23818 | 4.8 | Mar 20 | GeoServer is an open source software server written in Java that allows users to share and edit geospatial data Affected: before 2.23.3; 2.24.0 |
| CVE-2024-23643 | 4.8 | Mar 20 | GeoServer is an open source software server written in Java that allows users to share and edit geospatial data Affected: before 2.23.2; 2.24.0 |
| CVE-2024-23642 | 4.8 | Mar 20 | GeoServer is an open source software server written in Java that allows users to share and edit geospatial data Affected: before 2.23.4; 2.24.0 |
| CVE-2024-23640 | 4.8 | Mar 20 | GeoServer is an open source software server written in Java that allows users to share and edit geospatial data Affected: before 2.23.3 |
| CVE-2023-51445 | 4.8 | Mar 20 | GeoServer is an open source software server written in Java that allows users to share and edit geospatial data Affected: before 2.23.3 |
| CVE-2008-7227 | – | Sep 14 | PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an "in memory buffer," which prevents the reporting… Affected: through 1.6.0; 1.3.0; 1.3.0; 1.3.0; 1.3.0; 1.3.0; +20 more |
Showing 17