Mapserver
Vendor:
First CVE: Mar 31, 2009 · Active for 17 years
22
Total CVEs
More Total CVEs than 94% of tracked products
2.2
Avg CVEs / Year
Higher CVE frequency than 73% of tracked products
7.9
Avg CVSS
Higher Avg CVSS than 68% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Mapserver over time
Volume of CVEsAvg CVSS Base Score
First CVE
Mar 31, 2009
17 years ago
Most Recent CVE
May 27, 2026
58 days ago
CVE Severity & Scoring
Mapserver22 CVEs
23%
64%
9%
All CVEs352,231 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local0 (0.0%)
Network8 (36.4%)
Unknown14 (63.6%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low8 (36.4%)
High0 (0.0%)
Unknown14 (63.6%)
User Interaction
None7 (31.8%)
Unknown14 (63.6%)
Required1 (4.5%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None8 (36.4%)
Unknown14 (63.6%)
Top CVEs
Signals from CVEs in this product scope (22 CVEs).
22 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2011-2975MEDIUM Double free vulnerability in the msAddImageSymbol function in mapsymbol.c in MapServer before 6.0.1 might allow remote attackers to cause a denial of service (application crash) or | Aug 1, 2011 | 6.8 | 33 | NO | YES |
CVE-2025-59431CRITICAL MapServer is a system for developing web-based GIS applications. Prior to 8.4.1, the XML Filter Query directive PropertyName is vulnerably to Boolean-based SQL injection. It seems | Sep 19, 2025 | 9.8 | 30 | NO | NO |
CVE-2010-2540HIGH mapserv.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 does not properly restrict the use of CGI command-line arguments that were intended for debugging, which allows | Aug 2, 2010 | 10.0 | 29 | NO | NO |
CVE-2026-45104HIGH MapServer is a system for developing web-based GIS applications. From 6.4.0 to before 8.6.3, msSLDParseUserStyle always calls _SLDApplyRuleValues(psRule, psLayer, 1); for any <Rule | May 27, 2026 | 7.5 | 28 | NO | NO |
CVE-2009-0839HIGH Stack-based buffer overflow in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when the server has a map with a long IMAGEPATH or NAME attribute, allows r | Mar 31, 2009 | 10.0 | 28 | NO | NO |
CVE-2009-2281HIGH Multiple heap-based buffer underflows in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x through 4.10.4 and 5.x before 5.4.2 allow remote attackers to execute ar | Oct 23, 2009 | 10.0 | 27 | NO | NO |
CVE-2017-5522CRITICAL Stack-based buffer overflow in MapServer before 6.0.6, 6.2.x before 6.2.4, 6.4.x before 6.4.5, and 7.0.x before 7.0.4 allows remote attackers to cause a denial of service (crash) o | Mar 15, 2017 | 9.8 | 26 | NO | NO |
CVE-2009-1176HIGH mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 does not ensure that the string holding the id parameter ends in a '\0' character, which allows remote atta | Mar 31, 2009 | 10.0 | 26 | NO | NO |
CVE-2009-0841HIGH Directory traversal vulnerability in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when running on Windows with Cygwin, allows remote attackers to creat | Mar 31, 2009 | 10.0 | 26 | NO | NO |
CVE-2009-0840HIGH Heap-based buffer underflow in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to have an unknown impa | Mar 31, 2009 | 10.0 | 26 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (22 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
4.5% of CVEs· 88th percentile
Social Chatter
Signals from CVEs in this product scope (22 CVEs).
Media Mentions
Signals from CVEs in this product scope (22 CVEs).
Top CNAs Publishing CVEs For Mapserver
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 8.4.0 | 1 | 9.8 | 0.4% | 0 | 0 |
| 7.0.3 | 1 | 9.8 | 4.8% | 0 | 0 |
| 7.0.2 | 1 | 9.8 | 4.8% | 0 | 0 |
| 7.0.1 | 1 | 9.8 | 4.8% | 0 | 0 |
| 7.0.0 | 1 | 9.8 | 4.8% | 0 | 0 |
| 6.4.4 | 1 | 9.8 | 4.8% | 0 | 0 |
| 6.4.3 | 1 | 9.8 | 4.8% | 0 | 0 |
| 6.4.2 | 1 | 9.8 | 4.8% | 0 | 0 |
| 6.4.1 | 1 | 9.8 | 4.8% | 0 | 0 |
| 6.4.0 | 1 | 9.8 | 4.8% | 0 | 0 |
| 6.2.3 | 1 | 9.8 | 4.8% | 0 | 0 |
| 6.2.2 | 1 | 9.8 | 4.8% | 0 | 0 |
| 6.2.1 | 2 | 8.3 | 3.5% | 0 | 0 |
| 6.2.0 | 2 | 9.4 | 4.4% | 0 | 0 |
| 6.0.3 | 1 | 6.8 | 2.2% | 0 | 0 |
| 6.0.2 | 1 | 6.8 | 2.2% | 0 | 0 |
| 6.0.1 | 1 | 6.8 | 2.2% | 0 | 0 |
| 5.6.3 | 4 | 7.2 | 3.7% | 0 | 1 |
| 5.6.1 | 6 | 6.8 | 3.2% | 0 | 1 |
| 5.6.0 | 6 | 6.8 | 3.2% | 0 | 1 |