MA
Vendor
MapServer
6
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-54355 | MA MapServer MapServer | 5.3 | Sep 17 | MapServer: Reflected XSS in OpenLayers HTML Output via `HTTP_X_FORWARDED_HOST` |
| CVE-2026-54354 | MA MapServer MapServer | 8.2 | Sep 17 | MapServer: PostGIS Numeric Filter Value SQL Injection in MapServer Runtime Query Translation |
| CVE-2026-45104 | MA MapServer MapServer | 7.5 | May 27 | MapServer: NULL pointer dereference in SLD `<ElseFilter>` rule parsing reachable via WMS `SLD_BODY` |
| CVE-2026-42030 | MA MapServer MapServer | 6.1 | May 8 | MapServer: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in OpenLayers viewer |
| CVE-2026-33721 | MA MapServer MapServer | 7.5 | Mar 27 | MapServer has heap buffer overflow in SLD `Categorize` Threshold parsing |
| CVE-2025-59431 | MA MapServer MapServer | 9.8 | Sep 19 | MapServer - WFS XML Filter Query SQL injection |
