What’s Vulnerable › Products
Apache Software Foundation Apache Geode vulnerabilities
24 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.
Check whether your Apache Software Foundation Apache Geode version is affected
Exploited Apache Software Foundation Apache Geode vulnerabilities
- CVE-2020-1938 — Apache Tomcat Improper Privilege Management Vulnerability
- CVE-2019-15752 — Docker Desktop Community Edition Privilege Escalation Vulnerability
Latest Apache Software Foundation Apache Geode vulnerabilities
- CVE-2026-103371 — Apache Geode: Management REST API: Insertion of Sensitive Information into Log File (CVSS 7.5)
- CVE-2025-47410 — Apache Geode: CSRF attacks through GET requests to the Management and Monitoring REST API that can execute gfsh commands on the target system (CVSS 8.8)
- CVE-2024-44088 — Apache Geode: Reflected XSS (CVSS 6.1)
- CVE-2022-34870 — Apache Geode stored Cross-Site Scripting (XSS) via data injection vulnerability in Pulse web application (CVSS 5.4)
- CVE-2022-37023 — Apache Geode deserialization of untrusted data flaw when using REST API on Java 8 or Java 11 (CVSS 6.5)
- CVE-2022-37022 — Apache Geode deserialization of untrusted data flaw when using JMX over RMI on Java 11 (CVSS 8.8)
- CVE-2022-37021 — Apache Geode deserialization of untrusted data flaw when using JMX over RMI on Java 8. (CVSS 9.8)
- CVE-2021-34797 — Apache Geode project log file redaction of sensitive information vulnerability (CVSS 7.5)
- CVE-2019-10091 — (CVSS 7.4)
- CVE-2019-14892 — Polymorphic deserialization of malicious object in jackson-databind (CVSS 9.8)
- CVE-2020-1938 — Apache Tomcat Improper Privilege Management Vulnerability (CVSS 9.8) — exploited
- CVE-2014-0048 — (CVSS 9.8)
- CVE-2019-15752 — Docker Desktop Community Edition Privilege Escalation Vulnerability (CVSS 7.8) — exploited
- CVE-2017-15694 — (CVSS 6.5)
- CVE-2017-15695 — (CVSS 8.8)
- CVE-2017-15693 — (CVSS 7.5)
- CVE-2017-15692 — (CVSS 9.8)
- CVE-2017-15696 — (CVSS 7.5)
- CVE-2017-9796 — (CVSS 5.3)
- CVE-2017-9795 — (CVSS 7.5)
- CVE-2017-12622 — (CVSS 7.1)
- CVE-2017-9797 — (CVSS 6.5)
- CVE-2017-9794 — (CVSS 4.3)
- CVE-2017-5649 — (CVSS 7.5)