Product by Apache Software Foundation
Apache Geode
18 known vulnerabilities in Apache Geode (Apache Software Foundation), 0 of them actively exploited (CISA KEV).
Key figures
18
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2017-15692 | Apache Geode: Deserialization of Untrusted Data | 9.8 | |
| Critical | CVE-2022-37021 | Apache Geode: Deserialization of Untrusted Data | 9.8 | |
| High | CVE-2017-9795 | Apache Geode: Remote Code Execution | 7.5 | |
| High | CVE-2017-15695 | Apache Geode: Remote Code Execution | 8.8 | |
| High | CVE-2017-5649 | Apache Geode: security vulnerability | 7.5 | |
| High | CVE-2021-34797 | Apache Geode project log file redaction of sensitive information vulnerability | 7.5 | |
| High | CVE-2017-15693 | Apache Geode: Deserialization of Untrusted Data | 7.5 | |
| High | CVE-2017-15696 | Apache Geode: security vulnerability | 7.5 | |
| High | CVE-2022-37022 | Apache Geode deserialization of untrusted data flaw when using JMX over RMI on Java 11 | 8.8 | |
| High | CVE-2017-12622 | Apache Geode: security vulnerability | 7.1 | |
| Medium | CVE-2022-37023 | Apache Geode deserialization of untrusted data flaw when using REST API on Java 8 or Java 11 | 6.5 | |
| Medium | CVE-2017-9797 | Apache Geode: Denial of Service | 6.5 | |
| High | CVE-2026-103371 | Apache Geode: Management REST API: Insertion of Sensitive Information into Log File | 7.5 | |
| Medium | CVE-2017-9796 | Apache Geode: security vulnerability | 5.3 | |
| Medium | CVE-2022-34870 | Apache Geode: Cross-Site Scripting (XSS) | 5.4 | |
| Medium | CVE-2024-44088 | Apache Geode: Reflected XSS | 6.1 | |
| High | CVE-2025-47410 | Apache Geode: Cross-Site Request Forgery (CSRF) | 8.8 | |
| Medium | CVE-2017-9794 | Apache Geode: security vulnerability | 4.3 |