Browse CVEs

MEDIUM 6.1 CVE-2025-21621 GeoServer is an open source server that allows users to share and edit geospatial data. Prior to version 2.25.0, a reflected cross-site scripting (XS… Geoserver 2.25.0+ Fix from $1,6002025-11-25 CRITICAL 9.8 CVE-2025-58360 KEVEPSS 65% GeoServer is an open source server that allows users to share and edit geospatial data. From version 2.26.0 to before 2.26.2 and before 2.25.6, an XM… Geoserver 2.25.6 / 2.26.2+ Fix from $2,3002025-11-25 CRITICAL 9.8 CVE-2024-36401 KEVEPSS 100% GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.22.6, 2.23.6, 2.24.4, and 2.25.2, multipl… Geoserver 2.22.6 / 2.23.6+ Fix from $2,3002024-07-01 HIGH 7.5 CVE-2024-24749 GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.23.5 and 2.24.3, if GeoServer is deployed… Geoserver 2.23.5 / 2.24.3+ Fix from $1,9502024-07-01 MEDIUM 6.0 CVE-2024-23634 GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. An arbitrary file renaming vulnerabi… Geoserver 2.23.5 / 2.24.2+ Fix from $1,6002024-03-20 HIGH 7.2 CVE-2023-41877 GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A path traversal vulnerability in ve… Geoserver after 2.23.4 Fix from $1,9502024-03-20 HIGH 7.2 CVE-2023-51444 GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. An arbitrary file upload vulnerabili… Geoserver 2.23.4+ Fix from $1,9502024-03-20 HIGH 8.8 CVE-2023-5786 A vulnerability was found in GeoServer GeoWebCache up to 1.15.1. It has been declared as problematic. This vulnerability affects unknown code of the … Geowebcache 1.15.1+ Fix from $1,9502023-10-26 CRITICAL 9.8 CVE-2023-35042EPSS 43% GeoServer 2, in some configurations, allows remote attackers to execute arbitrary code via java.lang.Runtime.getRuntime().exec in wps:LiteralData wit… Geoserver Mitigation only Fix from $2,3002023-06-12 HIGH 7.2 CVE-2022-24846 GeoWebCache is a tile caching server implemented in Java. The GeoWebCache disk quota mechanism can perform an unchecked JNDI lookup, which in turn ca… Geowebcache 1.19.3 / 1.20.2+ Fix from $1,9502022-04-14 MEDIUM 5.0 CVE-2008-7227 PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an "in memory buffer,… Geoserver after 1.6.0 Fix from $1,6002009-09-14