Every CVE whose affected-product data names Osgeo Geoserver, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (16)
CVE-2025-30220 — CVSS 9.9 (critical): GeoServer is an open source server that allows users to share and edit geospatial data. GeoTools Schema class use of Eclipse XSD library to…
CVE-2023-25157 — CVSS 9.8 (critical): GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. GeoServer includes support…
CVE-2024-34711 — CVSS 9.3 (critical): GeoServer is an open source server that allows users to share and edit geospatial data. An improper URI validation vulnerability exists…
CVE-2023-41339 — CVSS 8.6 (high): GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. The WMS specification…
CVE-2023-43795 — CVSS 8.6 (high): GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. The OGC Web Processing…
CVE-2025-30145 — CVSS 7.5 (high): GeoServer is an open source server that allows users to share and edit geospatial data. Malicious Jiffle scripts can be executed by…
CVE-2024-29198 — CVSS 7.5 (high): GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. It possible to achieve…
CVE-2021-40822 — CVSS 7.5 (high): GeoServer through 2.18.5 and 2.19.x through 2.19.2 allows SSRF via the option for setting a proxy host.
CVE-2025-52465 — CVSS 7.2 (high): GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.26.4 and 2.27.3, a…
CVE-2022-24847 — CVSS 7.2 (high): GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. The GeoServer security…
CVE-2025-27511 — CVSS 7.2 (high): GeoServer is an open source server that allows users to share and edit geospatial data. Prior to version 2.27.0 of the GeoServer DB2…
CVE-2025-58175 — CVSS 6.5 (medium): GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.26.4 and 2.27.3, a GeoServer…
CVE-2024-40625 — CVSS 5.5 (medium): GeoServer is an open source server that allows users to share and edit geospatial data. The Coverage rest api /workspaces/{workspaceName}/co…
CVE-2025-27505 — CVSS 5.3 (medium): GeoServer is an open source server that allows users to share and edit geospatial data. It is possible to bypass the default REST API…
CVE-2024-38524 — CVSS 5.3 (medium): GeoServer is an open source server that allows users to share and edit geospatial data. org.geowebcache.GeoWebCacheDispatcher.handleFrontPag…
CVE-2024-35230 — CVSS 5.3 (medium): GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. In affected versions the…