Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Geode

18 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-37021

    Apache Geode deserialization of untrusted data flaw when using JMX over RMI on Java 8.

    Apache Geode versions up to 1.12.5, 1.13.4 and 1.14.0 are vulnerable to a deserialization of untrusted data flaw when using JMX over RMI on Java 8. Any user still on Java 8 who wishes to protect against deserialization attacks involving JMX or RMI should upgr…

    Apache Software Foundation Apache Geode org.apache.geode:geode-core Maven
  • Critical 9.8
    CVE-2017-15692

    Apache Geode unsafe deserialization in TcpServer

    In Apache Geode before v1.4.0, the TcpServer within the Geode locator opens a network port that deserializes data. If an unprivileged user gains access to the Geode locator, they may be able to cause remote code execution if certain classes are present on the…

    Apache Software Foundation Apache Geode org.apache.geode:geode-core Maven