Vendor
geoserver
On CISA KEV2Public exploit4Avg CVSS6.6
CVEs in the catalog
31
since 2022-04
Months in the top 100
2
months with a stored rank
Best rank
#38
one month recomputed
Affected scope
Products and weakness classes
Products
| Product | CVEs | Share |
|---|---|---|
| geoserver | 27 | 87% |
| org geoserver web gs web app | 2 | 6% |
| geowebcache | 1 | 3% |
| org geoserver extension gs db2 | 1 | 3% |
| org geoserver gs main | 1 | 3% |
| org geoserver web gs web sec core | 1 | 3% |
Weakness classes
| Weakness | CVEs | Share |
|---|---|---|
| CWE-79 | 8 | 26% |
| CWE-918 | 7 | 23% |
| CWE-20 | 4 | 13% |
| CWE-200 | 4 | 13% |
| CWE-611 | 4 | 13% |
| CWE-22 | 2 | 6% |
| CWE-73 | 2 | 6% |
| CWE-425 | 1 | 3% |
Latest CVEs
15 most recently published
Enriched records open their full page; the rest open their catalog record.
| CVE | Weakness | Signals | CVSS | Published |
|---|---|---|---|---|
| CVE-2025-58175 | CWE-20, CWE-611 | none yet | 6.5 | 2026-06-18 |
| CVE-2025-52465 | CWE-73 | none yet | 7.2 | 2026-06-18 |
| CVE-2025-27511 | CWE-502, CWE-74 | none yet | 7.2 | 2026-06-18 |
| CVE-2025-21621 | CWE-79 | none yet | 6.1 | 2025-11-25 |
| CVE-2025-58360 | CWE-611 | 1 | 8.2 | 2025-11-25 |
| CVE-2025-30220 | CWE-611, CWE-918 | none yet | 9.9 | 2025-06-10 |
| CVE-2025-30145 | CWE-835 | none yet | 7.5 | 2025-06-10 |
| CVE-2025-27505 | CWE-862 | none yet | 5.3 | 2025-06-10 |
| CVE-2024-40625 | CWE-918 | none yet | 5.5 | 2025-06-10 |
| CVE-2024-38524 | CWE-200 | none yet | 5.3 | 2025-06-10 |
| CVE-2024-34711 | CWE-200, CWE-611 | none yet | 9.3 | 2025-06-10 |
| CVE-2024-29198 | CWE-918 | none yet | 7.5 | 2025-06-10 |
| CVE-2024-35230 | CWE-200 | none yet | 5.3 | 2024-12-16 |
| CVE-2024-36401 | CWE-95 | 1 | 9.8 | 2024-07-01 |
| CVE-2024-34696 | CWE-200 | none yet | 4.5 | 2024-07-01 |