Skip to content
OpenAdvisories

Vendor

geoserver

31 known vulnerabilities.

Products

geoserver 27 org.geoserver.web:gs-web-app 2 GeoWebCache 1 org.geoserver.web:gs-web-sec-core 1 org.geoserver.extension:gs-db2 1 org.geoserver:gs-main 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.2
    CVE-2025-58360 Exploited Public exploit Scanner template EPSS 61%

    GeoServer is vulnerable to an Unauthenticated XML External Entities (XXE) attack via WMS GetMap feature

    GeoServer is an open source server that allows users to share and edit geospatial data. From version 2.26.0 to before 2.26.2 and before 2.25.6, an XML External Entity (XXE) vulnerability was identified. The application accepts XML input through a specific end…

    geoserver geoserver org.geoserver.web:gs-web-app org.geoserver:gs-wms Maven
    KEV Dec 11, 2025
  • Critical 9.8
    CVE-2024-36401 Exploited Public exploit Scanner template EPSS 100%

    Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver

    GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.22.6, 2.23.6, 2.24.4, and 2.25.2, multiple OGC request parameters allow Remote Code Execution (RCE) by unauthenticated users through specially crafted …

    geoserver geoserver org.geoserver.web:gs-web-app org.geoserver:gs-wms Maven
    KEV Jul 15, 2024
  • High 7.2
    CVE-2023-51444 Public exploit

    GeoServer arbitrary file upload vulnerability in REST Coverage Store API

    GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. An arbitrary file upload vulnerability exists in versions prior to 2.23.4 and 2.24.1 that enables an authenticated administrator with permissions …

    geoserver geoserver org.geoserver:gs-restconfig org.geoserver:gs-platform Maven
  • Critical 9.8
    CVE-2023-25157 Public exploit Scanner template EPSS 86%

    Unfiltered SQL Injection Vulnerabilities in Geoserver

    GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. GeoServer includes support for the OGC Filter expression language and the OGC Common Query Language (CQL) as part of the Web Feature Service (WFS)…

    geoserver geoserver org.geoserver.community:gs-jdbcconfig Maven