| CVE-2026-103371 |
Insertion of Sensitive Information into Log File in Apache Geode Web Management
|
Not rated
|
Oct 7, 2026 |
| CVE-2025-47410 |
Apache Geode is vulnerable to CSRF attacks through GET requests to the Management and Monitoring REST API that could…
|
Not rated
|
Oct 18, 2025 |
| CVE-2024-44088 |
Malicious script injection ('Cross-site Scripting') vulnerability in Apache Geode web-api (REST)
|
Not rated
|
Oct 14, 2025 |
| CVE-2022-34870 |
Apache Geode versions up to 1.15.0 are vulnerable to a Cross-Site Scripting (XSS) via data injection when using Pulse…
|
Not rated
|
Oct 25, 2022 |
| CVE-2022-37023 |
Apache Geode versions prior to 1.15.0 are vulnerable to a deserialization of untrusted data flaw when using REST API…
|
Not rated
|
Aug 31, 2022 |
| CVE-2022-37022 |
Apache Geode versions up to 1.12.2 and 1.13.2 are vulnerable to a deserialization of untrusted data flaw when using…
|
Not rated
|
Aug 31, 2022 |
| CVE-2022-37021 |
Apache Geode versions up to 1.12.5, 1.13.4 and 1.14.0 are vulnerable to a deserialization of untrusted data flaw when…
|
Not rated
|
Aug 31, 2022 |
| CVE-2021-34797 |
Apache Geode versions up to 1.12.4 and 1.13.4 are vulnerable to a log file redaction of sensitive information flaw…
|
Not rated
|
Jan 4, 2022 |
| CVE-2017-15695 |
When an Apache Geode server versions 1.0.0 to 1.4.0 is configured with a security manager, a user with DATA:WRITE…
|
Not rated
|
Jun 13, 2018 |
| CVE-2017-15693 |
In Apache Geode before v1.4.0, the Geode server stores application objects in serialized form
|
Not rated
|
Feb 27, 2018 |
| CVE-2017-15692 |
In Apache Geode before v1.4.0, the TcpServer within the Geode locator opens a network port that deserializes data
|
Not rated
|
Feb 27, 2018 |
| CVE-2017-15696 |
When an Apache Geode cluster before v1.4.0 is operating in secure mode, the Geode configuration service does not…
|
Not rated
|
Feb 26, 2018 |
| CVE-2017-9796 |
When an Apache Geode cluster before v1.3.0 is operating in secure mode, a user with read access to specific regions…
|
Not rated
|
Jan 10, 2018 |
| CVE-2017-9795 |
When an Apache Geode cluster before v1.3.0 is operating in secure mode, a user with read access to specific regions…
|
Not rated
|
Jan 10, 2018 |
| CVE-2017-12622 |
When an Apache Geode cluster before v1.3.0 is operating in secure mode and an authenticated user connects to a Geode…
|
Not rated
|
Jan 10, 2018 |
| CVE-2017-9797 |
When an Apache Geode cluster before v1.2.1 is operating in secure mode, an unauthenticated client can enter multi-user…
|
Not rated
|
Oct 2, 2017 |
| CVE-2017-9794 |
When a cluster is operating in secure mode, a user with read privileges for specific data regions can use the gfsh…
|
Not rated
|
Sep 29, 2017 |
| CVE-2017-5649 |
Apache Geode before 1.1.1, when a cluster has enabled security by setting the security-manager property, allows remote…
|
Not rated
|
Apr 4, 2017 |