Login Request a demo
GE
Product
Geode
by Apache · last CVE Oct 18, 2025
On CISA KEVExploited in the wild
23
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities23In the news0Timeline
Severity mix
Critical 5High 11Medium 7Low 0
Severity
All severities23Critical5High11Medium7Low0
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add Geode to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-1938
In wildKEV
9.8
99%
Feb 24
Apache Tomcat Improper Privilege Management Vulnerability
Affected: 1.12.0
CVE-2022-37021
9.8
3%
Aug 31
Apache Geode versions up to 1.12.5, 1.13.4 and 1.14.0 are vulnerable to a deserialization of untrusted data flaw when using JMX over RMI on Java 8
Affected: through 1.12.5; 1.13.0 through 1.13.4; 1.14.0
CVE-2019-14892
9.8
6%
Mar 2
A flaw was discovered in jackson-databind in versions before 2.9.10, 2.8.11.5 and 2.6.7.3, where it would permit polymorphic deserialization of a malicious object using…
Affected: 1.12.0
CVE-2014-0048
9.8
7%
Jan 2
An issue was found in Docker before 1.6.0
Affected: 1.12.0
CVE-2017-15692
9.8
5%
Feb 27
In Apache Geode before v1.4.0, the TcpServer within the Geode locator opens a network port that deserializes data
Affected: before 1.4.0
Showing 5