apache geode

Name: apache geode
Brand: apache

productUS

cpe:2.3:a:apache:geode:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

5critical10high6medium0low

updated 2026-10-26

vulnerabilities (23)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-1938US	critical9.8OT critical	99.3% (100th)	KEV	no fix	2020-02-24	= 1.12.0
CVE-2019-15752US	high7.8OT critical	48.6% (99th)	KEV	no fix	2019-08-28	= 1.12.0
CVE-2014-0048US	critical9.8	7.28% (94th)	—	no fix	2020-01-02	= 1.12.0
CVE-2019-14892US	critical9.8	5.58% (93rd)	—	no fix	2020-03-02	= 1.12.0
CVE-2017-15692US	critical9.8	4.78% (92nd)	—	1.4.0	2018-02-27	< 1.4.0
CVE-2017-9795US	high7.5	4.18% (91st)	—	1.3.0	2018-01-10	< 1.3.0
CVE-2017-5649US	high7.5	2.78% (86th)	—	no fix	2017-04-04	≤ 1.1.0
CVE-2022-37021US	critical9.8	2.58% (85th)	—	no fix	2022-08-31	3 versions
CVE-2021-34797US	high7.5	2.51% (85th)	—	no fix	2022-01-04	2 versions
CVE-2017-15695US	high8.8OT elevated	2.51% (85th)	—	no fix	2018-06-13	1.0.0 → 1.4.0
CVE-2017-15693US	high7.5	2.47% (84th)	—	1.4.0	2018-02-27	< 1.4.0
CVE-2017-15694US	medium6.5	2.15% (82nd)	—	no fix	2019-06-21	1.0.0 → 1.8.0
CVE-2017-12622US	high7.1	2.08% (81st)	—	1.3.0	2018-01-10	< 1.3.0
CVE-2017-15696US	high7.5	2.00% (81st)	—	no fix	2018-02-26	1.0.0 → 1.3.0
CVE-2022-37023US	medium6.5	1.67% (77th)	—	1.15.0	2022-08-31	< 1.15.0
CVE-2017-9796US	medium5.3	1.48% (74th)	—	1.3.0	2018-01-10	< 1.3.0
CVE-2022-37022US	high8.8	1.48% (74th)	—	no fix	2022-08-31	2 versions
CVE-2019-10091US	high7.4	1.42% (73rd)	—	no fix	2020-03-16	= 1.9.0
CVE-2022-34870US	medium5.4	1.38% (72nd)	—	no fix	2022-10-25	≤ 1.15.0
CVE-2017-9797US	medium6.5	1.36% (72nd)	—	no fix	2017-10-03	≤ 1.2.0
CVE-2017-9794US	medium4.3	1.18% (67th)	—	no fix	2017-09-30	≤ 1.2.0
CVE-2024-44088US	—	0.69% (52nd)	—	1.15.2	2025-10-14	1.1.0 → 1.15.2
CVE-2025-47410US	—	0.36% (28th)	—	1.15.2	2025-10-18	1.10.0 → 1.15.2

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor8 CVEs
CWE-502Deserialization of Untrusted Data6 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-285Improper Authorization1 CVEs
CWE-295Improper Certificate Validation1 CVEs
CWE-352Cross-Site Request Forgery (CSRF)1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE23 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan