MA
Vendor
MapServer
1 product with CVEs on record
6
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-54355
MA
MapServer
MapServer
5.3
0%
Sep 17MapServer: Reflected XSS in OpenLayers HTML Output via `HTTP_X_FORWARDED_HOST`
CVE-2026-54354
MA
MapServer
MapServer
8.2
1%
Sep 17MapServer: PostGIS Numeric Filter Value SQL Injection in MapServer Runtime Query Translation
CVE-2026-45104
MA
MapServer
MapServer
7.5
0%
May 27MapServer: NULL pointer dereference in SLD `<ElseFilter>` rule parsing reachable via WMS `SLD_BODY`
CVE-2026-42030
MA
MapServer
MapServer
6.1
0%
May 8MapServer: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in OpenLayers viewer
CVE-2026-33721
MA
MapServer
MapServer
7.5
1%
Mar 27MapServer has heap buffer overflow in SLD `Categorize` Threshold parsing
CVE-2025-59431
MA
MapServer
MapServer
9.8
0%
Sep 19MapServer - WFS XML Filter Query SQL injection