GE
Vendor
geonetwork
7
CVEs
0
On KEV
0
New 30D
Products
CO9.1
core-geonetwork
geonetwork
5 CVEs0 on KEV0 new
GE6.5
GeoNetwork
GeoNetwork
1 CVEs0 on KEV0 new
OP–
Opensource
Geonetwork
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-55864 | CO core-geonetwork geonetwork | 7.8 | Sep 15 | GeoNetwork: Unauthenticaded Server-Side Request Forgery in SLD Tool |
| CVE-2026-63219 | CO core-geonetwork geonetwork | 8.6 | Sep 3 | Unauthenticated file upload via missing authorization on formatter upload endpoint |
| CVE-2026-58400 | CO core-geonetwork geonetwork | 9.1 | Sep 3 | GeoNetwork vulnerable to Remote Code Execution via unsafe Saxon XSLT processor configuration in formatter |
| CVE-2026-53573 | CO core-geonetwork geonetwork | 4.8 | Jul 31 | core-geonetwork has an Open Redirect Bypass |
| CVE-2022-50899 | GE GeoNetwork GeoNetwork | 6.5 | Jan 13 | Geonetwork 4.2.0 - XML External Entity (XXE) |
| CVE-2024-32037 | CO core-geonetwork geonetwork | 5.3 | Feb 11 | GeoNetwork vulnerable to search end-point information disclosure in response headers |
| CVE-2006-5513 | OP Opensource Geonetwork | – | Oct 26 | SQL injection vulnerability in GeoNetwork opensource before 2.0.3 allows remote attackers to execute arbitrary SQL commands, and complete a login, via unspecified vectors |