Login Request a demo
GE
Product
Geonetwork
by Osgeo · last CVE Jan 13, 2026
4
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 1High 1Medium 2Low 0
Severity
All severities4Critical1High1Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Geonetwork to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-30220
9.1
42%
Jun 10
GeoServer is an open source server that allows users to share and edit geospatial data
Affected: 4.2.0 before 4.2.13; 4.4.0 before 4.4.8
CVE-2021-28398
7.2
1%
Sep 5
A privileged attacker in GeoNetwork before 3.12.0 and 4.x before 4.0.4 can use the directory harvester before-script to execute arbitrary OS commands remotely on the hosting…
Affected: 3.4.0 before 3.12.0; 4.0.0 before 4.0.4; 4.0.0; 4.0.0
CVE-2022-50899
6.5
1%
Jan 13
Geonetwork 4.2.0 - XML External Entity (XXE)
Affected: 3.10.0 through 4.2.0
CVE-2024-32037
5.3
0%
Feb 11
GeoNetwork is a catalog application to manage spatially referenced resources
Affected: before 4.2.10; 4.4.0 before 4.4.5
Showing 4