Geonetwork

7 CVEs across 3 Geonetwork products. Browse Geonetwork vulnerabilities, severities, and proof-of-concept exploits.

Geonetwork products with known CVEs

ProductCVEs
Core-Geonetwork5
Geonetwork1
Opensource1
Geonetwork CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-558642026-09-15GeoNetwork is a catalog application to manage spatially referenced resources. Prior to 4.2.17 and 4.4.12, POST /api/tools/ogc/sld accepted a caller-supplied WM…
CVE-2026-63219High8.62026-09-03GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.12 and 4.2.17, the API endpoint for creating a new formatte…
CVE-2026-58400Critical9.12026-09-03GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.12 and 4.2.17, the Saxon XSLT processor used to render form…
CVE-2026-535732026-07-31GeoNetwork is a catalog application to manage spatially referenced resources. From 3.12.0 until 4.2.16 and 4.4.11, unsafe redirect validation in GeonetworkOAut…
CVE-2022-50899Medium6.52026-01-13Geonetwork 3.10 through 4.2.0 contains an XML external entity vulnerability in PDF rendering that allows attackers to retrieve arbitrary files from the server…
CVE-2024-32037Unrated2025-02-11GeoNetwork is a catalog application to manage spatially referenced resources. In versions prior to 4.2.10 and 4.4.5, the search end-point response headers cont…
CVE-2006-55132006-10-26SQL injection vulnerability in GeoNetwork opensource before 2.0.3 allows remote attackers to execute arbitrary SQL commands, and complete a login, via unspecif…