geonetwork vulnerabilities
8 published CVEs name geonetwork among the affected products.
- Published CVEs
- 8
- Last 12 months
- 7
- Critical
- 1
- Known exploited
- 0
Critical 1High 5Medium 1Low 0Not scored 1
CVEs per yearBy the year they were published
- 20251
- 20267
Newest CVEs
- CVE-2026-39379
GeoNetwork: Reflected XSS through client-side template injection
geonetwork · core-geonetwork
High7.1 - CVE-2026-46487
GeoNetwork: ACL bypass on Elasticsearch search when request body omits query field
geonetwork · core-geonetwork
High7.5 - CVE-2026-55864
GeoNetwork: Unauthenticaded Server-Side Request Forgery in SLD Tool
geonetwork · core-geonetwork
High7.8 - CVE-2026-63219
Unauthenticated file upload via missing authorization on formatter upload endpoint
geonetwork · core-geonetwork
High8.6 - CVE-2026-58400
GeoNetwork vulnerable to Remote Code Execution via unsafe Saxon XSLT processor configuration in formatter
geonetwork · core-geonetwork
Critical9.1 - CVE-2026-53573
core-geonetwork has an Open Redirect Bypass
geonetwork · core-geonetwork
Medium4.8 - CVE-2022-50899
Geonetwork 4.2.0 - XML External Entity (XXE)
GeoNetwork · GeoNetwork
High8.7 - CVE-2024-32037
GeoNetwork vulnerable to search end-point information disclosure in response headers
geonetwork · core-geonetwork
None0.0