Sploitus

33 exploited vulnerabilities in Geoserver

Vulnerabilities with publicly known exploits

Vendors
Geoserver, Jai-Ext, Janino, Eclipse, Unknown, Geotools
With known exploits
33
Affected Geoserver versions
< 2.22.6, 2.23.6, 2.24.4, 2.25.2, 2.25.6, 2.26.2, 2.23.4, 2.24.0, 2.25.0, 2.23.5, 2.24.2, 2.23.3, 2.23.2, 2.25.1
Affected Geotools versions
< 29.6, 30.4, 31.2, 30.0, 31.0, 28.6.1, 31.7, 32.3, 33.0
Affected Osgeo Geoserver versions
< 2.18.7, 2.19.7, 2.20.7, 2.21.4, 2.22.2, 2.25.7, 2.26.3, 2.27.0, 2.25.0, 2.26.4, 2.27.3, 2.19.6, 2.20.4, 2.22.5, 2.23.2, 2.24.4, 2.25.2, 2.26.0, 2.25.6, 2.26.2, 2.25.1
Affected Geosolutionsgroup Jai-ext versions
< 1.1.22
Affected Osgeo Geonetwork versions
< 4.2.13, 4.4.8
Affected Geoserver Geowebcache versions
< 1.19.3, 1.20.2
Affected Geosolutionsgroup Geonode versions
< 2.18.7, 2.19.6, 2.20.6, 4.0.3

Vulnerabilities with exploits

Highest CVSS first — 5 of these already have exploit code on Sploitus

CVE-2024-36401 45 exploits
CVSS 9.8 CRITICAL 2024-06-04FIX AVAILABLE
CVE-2023-25157 12 exploits
CVSS 9.8 CRITICAL 2023-02-21FIX AVAILABLE
CVE-2022-24816 2 exploits
CVSS 10.0 CRITICAL 2022-04-13FIX AVAILABLE
CVE-2025-30220
CVSS 9.9 CRITICAL 2025-06-09FIX AVAILABLE
CVE-2025-58360 11 exploits
CVSS 9.8 CRITICAL 2025-11-25FIX AVAILABLE
CVE-2024-34711
CVSS 9.3 CRITICAL 2025-06-10FIX AVAILABLE
CVE-2022-24846
CVSS 9.1 CRITICAL 2022-04-14FIX AVAILABLE
CVE-2025-52465
CVSS 7.2 HIGH 2025-09-02FIX AVAILABLE
CVE-2022-24847
CVSS 7.2 HIGH 2022-04-13FIX AVAILABLE
CVE-2023-43795
CVSS 9.8 CRITICAL 2023-10-24FIX AVAILABLE
CVE-2023-41339
CVSS 8.6 HIGH 2023-10-24FIX AVAILABLE
CVE-2025-58175
CVSS 8.2 HIGH 2026-06-12FIX AVAILABLE
CVE-2024-29198
CVSS 8.2 HIGH 2025-06-10FIX AVAILABLE
CVE-2025-30145
CVSS 7.5 HIGH 2025-06-10FIX AVAILABLE
CVE-2024-40625
CVSS 5.5 MEDIUM 2025-06-10FIX AVAILABLE
CVE-2024-38524
CVSS 7.5 HIGH 2025-06-10FIX AVAILABLE
CVE-2023-28442
CVSS 7.5 HIGH 2023-03-23FIX AVAILABLE
CVE-2025-27511
CVSS 7.2 HIGH 2026-06-11FIX AVAILABLE
CVE-2023-51444 1 exploit
CVSS 7.2 HIGH 2024-03-20FIX AVAILABLE
CVE-2023-41877
CVSS 7.2 HIGH 2024-03-20
CVE-2023-26043
CVSS 6.5 MEDIUM 2023-02-27FIX AVAILABLE
CVE-2025-21621
CVSS 6.1 MEDIUM 2024-02-08FIX AVAILABLE
CVE-2024-23634
CVSS 6.0 MEDIUM 2024-03-20FIX AVAILABLE
CVE-2025-27505
CVSS 5.3 MEDIUM 2025-06-10FIX AVAILABLE
CVE-2024-35230
CVSS 5.3 MEDIUM 2024-12-16FIX AVAILABLE
CVE-2024-23821
CVSS 4.8 MEDIUM 2024-03-20FIX AVAILABLE
CVE-2024-23819
CVSS 4.8 MEDIUM 2024-03-20FIX AVAILABLE
CVE-2024-23818
CVSS 4.8 MEDIUM 2024-03-20FIX AVAILABLE
CVE-2024-23643
CVSS 4.8 MEDIUM 2024-03-20FIX AVAILABLE
CVE-2024-23642
CVSS 4.8 MEDIUM 2024-03-20FIX AVAILABLE
CVE-2024-23640
CVSS 4.8 MEDIUM 2024-03-20FIX AVAILABLE
CVE-2023-51445
CVSS 4.8 MEDIUM 2024-03-20FIX AVAILABLE
CVE-2024-34696
CVSS 4.9 MEDIUM 2024-07-01FIX AVAILABLE