Apache Software Foundation Geode vulnerabilities

• apache software foundation geode Apache Geode: Management REST API: Insertion of Sensitive Information into Log File CVE-2026-103371 7.5 HighOctober 7, 2026
• apache geode Apache Geode: CSRF attacks through GET requests to the Management and Monitoring REST API that can execute gfsh commands on the target system CVE-2025-47410 Fix available 8.8 HighOctober 18, 2025
• apache geode Apache Geode: Reflected XSS CVE-2024-44088 Fix available 6.1 MediumOctober 14, 2025
• apache geode Apache Geode stored Cross-Site Scripting (XSS) via data injection vulnerability in Pulse web application CVE-2022-34870 Fix available 5.4 MediumOctober 25, 2022
• apache geode Apache Geode deserialization of untrusted data flaw when using REST API on Java 8 or Java 11 CVE-2022-37023 Fix available 6.5 MediumAugust 31, 2022
• apache geode Apache Geode deserialization of untrusted data flaw when using JMX over RMI on Java 11 CVE-2022-37022 Fix available 8.8 HighAugust 31, 2022
• apache geode Apache Geode deserialization of untrusted data flaw when using JMX over RMI on Java 8. CVE-2022-37021 Fix available 9.8 CriticalAugust 31, 2022
• apache geode Apache Geode project log file redaction of sensitive information vulnerability CVE-2021-34797 Fix available 7.5 HighJanuary 4, 2022
• apache geode Apache Geode SSL endpoint verification vulnerability CVE-2019-10091 Fix available 7.4 HighMarch 16, 2020
• apache geode Argument Injection in Apache Geode server CVE-2017-15694 Fix available 6.5 MediumJune 21, 2019
• apache geode Apache Geode vulnerable to Incorrect Authorization CVE-2017-15695 Fix available 8.8 HighJune 13, 2018
• apache geode Apache Geode unsafe deserialization of application objects CVE-2017-15693 Fix available 7.5 HighFebruary 27, 2018
• apache geode Apache Geode unsafe deserialization in TcpServer CVE-2017-15692 Fix available 9.8 CriticalFebruary 27, 2018
• apache geode Apache Geode configuration request authorization vulnerability CVE-2017-15696 Fix available 7.5 HighFebruary 26, 2018
• apache geode Apache Geode OQL bind parameter vulnerability CVE-2017-9796 Fix available 5.3 MediumJanuary 10, 2018
• apache geode Apache Geode OQL method invocation vulnerability CVE-2017-9795 Fix available 7.5 HighJanuary 10, 2018
• apache geode Apache Geode gfsh authorization vulnerability CVE-2017-12622 Fix available 7.1 HighJanuary 10, 2018
• apache geode Apache Geode vulnerable to Exposure of Sensitive Information CVE-2017-9797 Fix available 6.5 MediumOctober 2, 2017
• apache geode Apache Geode gfsh query vulnerability CVE-2017-9794 Fix available 4.3 MediumSeptember 29, 2017
• apache geode Apache Geode information disclosure vulnerability CVE-2017-5649 Fix available 7.5 HighApril 4, 2017