Apache Ode vulnerabilities

• apache geode Apache Geode: CSRF attacks through GET requests to the Management and Monitoring REST API that can execute gfsh commands on the target system CVE-2025-47410 Fix available 8.8 HighOctober 18, 2025
• apache geode Apache Geode: Reflected XSS CVE-2024-44088 Fix available 6.1 MediumOctober 14, 2025
• apache geode Apache Geode stored Cross-Site Scripting (XSS) via data injection vulnerability in Pulse web application CVE-2022-34870 Fix available 5.4 MediumOctober 25, 2022
• apache geode Apache Geode deserialization of untrusted data flaw when using REST API on Java 8 or Java 11 CVE-2022-37023 Fix available 6.5 MediumAugust 31, 2022
• apache geode Apache Geode deserialization of untrusted data flaw when using JMX over RMI on Java 11 CVE-2022-37022 Fix available 8.8 HighAugust 31, 2022
• apache geode Apache Geode deserialization of untrusted data flaw when using JMX over RMI on Java 8. CVE-2022-37021 Fix available 9.8 CriticalAugust 31, 2022
• apache skywalking nodejs agent Service unavailability impact in NodeJS agent(version <= 0.5.0) CVE-2022-36127 Fix available 7.5 HighJuly 18, 2022
• apache geode Apache Geode project log file redaction of sensitive information vulnerability CVE-2021-34797 Fix available 7.5 HighJanuary 4, 2022
• apache geode Apache Geode SSL endpoint verification vulnerability CVE-2019-10091 Fix available 7.4 HighMarch 16, 2020
• fasterxml jackson-databind, apache geode, redhat decision manager +5 more +7 more Polymorphic deserialization of malicious object in jackson-databind CVE-2019-14892 Fix available 7.5 HighMarch 2, 2020
• apache tomcat, geode, blackberry good control +18 more +20 more Improper Privilege Management in Tomcat CVE-2020-1938 In KEVPublic exploitFix available EPSS 99.3% 9.8 CriticalFebruary 24, 2020
• docker, apache geode, docker.io +2 more An issue was found in Docker before 1.6.0. Some programs and scripts in Docker are downloaded via... CVE-2014-0048 Fix available 9.8 CriticalJanuary 2, 2020
• docker desktop community edition, docker, apache geode +2 more Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing... CVE-2019-15752 In KEVPublic exploit EPSS 48.8% 7.8 HighAugust 28, 2019
• apache geode Argument Injection in Apache Geode server CVE-2017-15694 Fix available 6.5 MediumJune 21, 2019
• apache geode Apache Geode vulnerable to Incorrect Authorization CVE-2017-15695 Fix available 8.8 HighJune 13, 2018
• apache ode Apache ODE Path Traversal vulnerability CVE-2018-1316 Fix available 7.5 HighMarch 5, 2018
• apache geode Apache Geode unsafe deserialization of application objects CVE-2017-15693 Fix available 7.5 HighFebruary 27, 2018
• apache geode Apache Geode unsafe deserialization in TcpServer CVE-2017-15692 Fix available 9.8 CriticalFebruary 27, 2018
• apache geode Apache Geode configuration request authorization vulnerability CVE-2017-15696 Fix available 7.5 HighFebruary 26, 2018
• apache geode Apache Geode OQL bind parameter vulnerability CVE-2017-9796 Fix available 5.3 MediumJanuary 10, 2018
• apache geode Apache Geode OQL method invocation vulnerability CVE-2017-9795 Fix available 7.5 HighJanuary 10, 2018
• apache geode Apache Geode gfsh authorization vulnerability CVE-2017-12622 Fix available 7.1 HighJanuary 10, 2018
• apache geode Apache Geode vulnerable to Exposure of Sensitive Information CVE-2017-9797 Fix available 6.5 MediumOctober 2, 2017
• apache geode Apache Geode gfsh query vulnerability CVE-2017-9794 Fix available 4.3 MediumSeptember 29, 2017
• apache geode Apache Geode information disclosure vulnerability CVE-2017-5649 Fix available 7.5 HighApril 4, 2017