Vulnerability index

Browse CVEs

11 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Geoserver MEDIUM 6.1
CVE-2025-21621

GeoServer is an open source server that allows users to share and edit geospatial data. Prior to version 2.25.0, a reflected cross-site scripting (XS…

Fix: 2.25.0+
Fix from $1,600 2025-11-25
Geoserver CRITICAL 9.8
CVE-2025-58360 KEVEPSS 65%

GeoServer is an open source server that allows users to share and edit geospatial data. From version 2.26.0 to before 2.26.2 and before 2.25.6, an XM…

Fix: 2.25.6 / 2.26.2+
Fix from $2,300 2025-11-25
Geoserver CRITICAL 9.8
CVE-2024-36401 KEVEPSS 100%

GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.22.6, 2.23.6, 2.24.4, and 2.25.2, multipl…

Fix: 2.22.6 / 2.23.6+
Fix from $2,300 2024-07-01
Geoserver HIGH 7.5
CVE-2024-24749

GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.23.5 and 2.24.3, if GeoServer is deployed…

Fix: 2.23.5 / 2.24.3+
Fix from $1,950 2024-07-01
Geoserver MEDIUM 6.0
CVE-2024-23634

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. An arbitrary file renaming vulnerabi…

Fix: 2.23.5 / 2.24.2+
Fix from $1,600 2024-03-20
Geoserver HIGH 7.2
CVE-2023-41877

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A path traversal vulnerability in ve…

Fix: after 2.23.4
Fix from $1,950 2024-03-20
Geoserver HIGH 7.2
CVE-2023-51444

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. An arbitrary file upload vulnerabili…

Fix: 2.23.4+
Fix from $1,950 2024-03-20
Geowebcache HIGH 8.8
CVE-2023-5786

A vulnerability was found in GeoServer GeoWebCache up to 1.15.1. It has been declared as problematic. This vulnerability affects unknown code of the …

Fix: 1.15.1+
Fix from $1,950 2023-10-26
Geoserver CRITICAL 9.8
CVE-2023-35042EPSS 43%

GeoServer 2, in some configurations, allows remote attackers to execute arbitrary code via java.lang.Runtime.getRuntime().exec in wps:LiteralData wit…

Mitigation only
Fix from $2,300 2023-06-12
Geowebcache HIGH 7.2
CVE-2022-24846

GeoWebCache is a tile caching server implemented in Java. The GeoWebCache disk quota mechanism can perform an unchecked JNDI lookup, which in turn ca…

Fix: 1.19.3 / 1.20.2+
Fix from $1,950 2022-04-14
Geoserver MEDIUM 5.0
CVE-2008-7227

PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an "in memory buffer,…

Fix: after 1.6.0
Fix from $1,600 2009-09-14