CVE Tools
Track your stack

Geonetwork

1 CVEs tracked since 2006. Since Oct 2006, none of them reached CISA KEV.

Geonetwork CVEs per month

Oct 2006 to Oct 2006. Point at a month, or focus the strip and use the arrow keys.
Geonetwork CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2006-1010

Products

The products that kept showing up in Geonetwork's monthly top three, with their CVEs summed over those months.

  1. Opensource11 month

Latest CVEs

The 7 most recently published vulnerabilities affecting Geonetwork.

  1. CVE-2026-55864GeoNetwork: Unauthenticaded Server-Side Request Forgery in SLD Tool—
  2. CVE-2026-63219Unauthenticated file upload via missing authorization on formatter upload endpoint8.6
  3. CVE-2026-58400GeoNetwork vulnerable to Remote Code Execution via unsafe Saxon XSLT processor configuration in formatter9.1
  4. CVE-2026-53573core-geonetwork has an Open Redirect Bypass—
  5. CVE-2022-50899Geonetwork 4.2.0 - XML External Entity (XXE)6.5
  6. CVE-2024-32037GeoNetwork vulnerable to search end-point information disclosure in response headers—
  7. CVE-2006-5513SQL injection vulnerability in GeoNetwork opensource before 2.0.3 allows remote attackers to execute arbitrary SQL commands, and complete a login, via unspecified vectors.7.5

The record

Peak rank
#160 in Oct 2006
Busiest month shown
Oct 2006, 1 CVEs
Months with a KEV entry
0 since Oct 2006
Monthly snapshots
1 since 2006
Geonetwork's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store