Skip to content
Geonetwork vulnerabilities
Newest
-
geonetwork core-geonetwork
GeoNetwork: Unauthenticaded Server-Side Request Forgery in SLD Tool
CVE-2026-55864
Fix available
7.8 High
-
geonetwork core-geonetwork
Unauthenticated file upload via missing authorization on formatter upload endpoint
CVE-2026-63219
Known exploited
8.6 High
-
geonetwork core-geonetwork
GeoNetwork vulnerable to Remote Code Execution via unsafe Saxon XSLT processor configuration in formatter
CVE-2026-58400
Known exploited
9.1 Critical
-
geonetwork core-geonetwork
core-geonetwork has an Open Redirect Bypass
CVE-2026-53573
Fix available
4.8 Medium
-
geonetwork core-geonetwork
GeoNetwork: ACL bypass on Elasticsearch search when request body omits query field
CVE-2026-46487
Fix available
7.5 High
-
geonetwork core-geonetwork
GeoNetwork: Reflected XSS through client-side template injection
CVE-2026-39379
Fix available
7.1 High
-
geonetwork
Geonetwork 4.2.0 - XML External Entity (XXE)
CVE-2022-50899
8.7 High
-
osgeo geonetwork, geonetwork core-geonetwork +1 more
GeoNetwork vulnerable to search end-point information disclosure in response headers
CVE-2024-32037
Fix available
0.0 None
-
geonetwork opensource
SQL injection vulnerability in GeoNetwork opensource before 2.0.3 allows remote attackers to...
CVE-2006-5513
7.5 High