Login Request a demo
GE
Product
Geode
by Apache · last CVE Oct 18, 2025
On CISA KEVExploited in the wild
23
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities23In the news0Timeline
Severity mix
Critical 5High 11Medium 7Low 0
Severity
All severities23Critical5High11Medium7Low0
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add Geode to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-37023
6.5
2%
Aug 31
Apache Geode versions prior to 1.15.0 are vulnerable to a deserialization of untrusted data flaw when using REST API on Java 8 or Java 11
Affected: before 1.15.0
CVE-2017-15694
6.5
2%
Jun 21
When an Apache Geode server versions 1.0.0 to 1.8.0 is operating in secure mode, a user with write permissions for specific data regions can modify internal cluster metadata
Affected: 1.0.0 through 1.8.0
CVE-2017-9797
6.5
1%
Oct 3
When an Apache Geode cluster before v1.2.1 is operating in secure mode, an unauthenticated client can enter multi-user authentication mode and send metadata messages
Affected: through 1.2.0
CVE-2024-44088
6.1
1%
Oct 14
Malicious script injection ('Cross-site Scripting') vulnerability in Apache Geode web-api (REST)
Affected: 1.1.0 before 1.15.2
CVE-2022-34870
5.4
1%
Oct 25
Apache Geode stored Cross-Site Scripting (XSS) via data injection vulnerability in Pulse web application
Affected: through 1.15.0
CVE-2017-9796
5.3
1%
Jan 10
When an Apache Geode cluster before v1.3.0 is operating in secure mode, a user with read access to specific regions within a Geode cluster may execute OQL queries containing a…
Affected: before 1.3.0
CVE-2017-9794
4.3
1%
Sep 30
When a cluster is operating in secure mode, a user with read privileges for specific data regions can use the gfsh command line utility to execute queries
Affected: through 1.2.0
Showing 7