Mapserver

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 7
    Known Exploited: 0
    2
    Critical Level Threats
    2
    High Level Threats
    2
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-54355

    MapServer: Reflected XSS in OpenLayers HTML Output via `HTTP_X_FORWARDED_HOST`

    Last Modified: Sep 24, 2026
    Published: Sep 17, 2026

    CVE-2026-54354

    MapServer: PostGIS Numeric Filter Value SQL Injection in MapServer Runtime Query Translation

    Last Modified: Sep 18, 2026
    Published: Sep 17, 2026

    CVE-2026-45104

    MapServer: NULL pointer dereference in SLD `<ElseFilter>` rule parsing reachable via WMS `SLD_BODY`

    Last Modified: Jun 02, 2026
    Published: May 27, 2026

    CVE-2026-42030

    MapServer: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in OpenLayers viewer

    Last Modified: May 14, 2026
    Published: May 08, 2026

    CVE-2026-30479

    DLL Injection in MapServer Pre-8.0 Enabling Arbitrary Code Execution

    Last Modified: Apr 15, 2026
    Published: Apr 09, 2026
    Items Per Page
    Mapserver Vulnerabilities & Security CVEs | CVE-DB