G
Vendor security profile2 actively exploited CVEs
geoserver
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs6
Critical1
CISA KEV2
Public exploit2
Patch rate%50
Avg. CVSS7.7
12-month vulnerability rate
2
0
0
0
0
0
0
3
0
0
0
0
CVE KEV
CVE severity distribution
6toplam CVE
Critical1 (17%)
High3 (50%)
Medium1 (17%)
Uncertain1 (17%)
Patch and exploitation view
%50
Verified patch
%33
CISA KEV
%33
Public exploit
3Patch available
0Partial
2Workaround
0Vendor: no patch
1Unknown
Latest vulnerabilities
6.1
CVE-2025-21621Cross-site scripting in Geoserver
Patch verifiedEPSS %0
9.8
CVE-2025-58360 Actively exploitedXML external entity injection in Geoserver
Workaround Public Exploits:1EPSS %61