Vendor

geoserver

31 known vulnerabilities.

Products

geoserver 27 org.geoserver.web:gs-web-app 2 GeoWebCache 1 org.geoserver.web:gs-web-sec-core 1 org.geoserver.extension:gs-db2 1 org.geoserver:gs-main 1

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.2

CVE-2025-58360 Exploited Public exploit Scanner template EPSS 61%

GeoServer is vulnerable to an Unauthenticated XML External Entities (XXE) attack via WMS GetMap feature

GeoServer is an open source server that allows users to share and edit geospatial data. From version 2.26.0 to before 2.26.2 and before 2.25.6, an XML External Entity (XXE) vulnerability was identified. The application accepts XML input through a specific end…

geoserver geoserver org.geoserver.web:gs-web-app org.geoserver:gs-wms Maven

Nov 25, 2025
KEV Dec 11, 2025