O
Vendor security profile3 actively exploited CVEs
osgeo
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs9
Critical0
CISA KEV3
Public exploit5
Patch rate%44
Avg. CVSS6.9
12-month vulnerability rate
0
1
0
0
0
0
3
3
0
0
0
0
CVE KEV
CVE severity distribution
9toplam CVE
High4 (44%)
Medium2 (22%)
Uncertain3 (33%)
Patch and exploitation view
%44
Verified patch
%33
CISA KEV
%56
Public exploit
4Patch available
0Partial
3Workaround
0Vendor: no patch
2Unknown
Latest vulnerabilities
8.2
CVE-2025-58175Improper input validation in Osgeo Geoserver
Patch verifiedEPSS %0
7.2
7.2
CVE-2025-27511Deserialization of untrusted data in Osgeo Geoserver
Patch status unknownEPSS %1
7.8
5.5
CVE-2026-8213Memory buffer overflow in Osgeo Gdal
Patch verified Public Exploits:2EPSS %0
5.5
CVE-2026-8212Memory buffer overflow in Osgeo Gdal
Patch verified Public Exploits:2EPSS %0
-
CVE-2025-58360 Actively exploitedOSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability
Workaround Public Exploits:1EPSS %61
-
CVE-2024-36401 Actively exploitedOSGeo GeoServer GeoTools Eval Injection Vulnerability
Workaround Public Exploits:11EPSS %100
-
CVE-2022-24816 Actively exploitedOSGeo GeoServer JAI-EXT Code Injection Vulnerability
Workaround Public Exploits:2EPSS %100