Apache Software Foundation Apache Geode

• CVE-2026-103371 High 7.5 Apache Geode: Management REST API: Insertion of Sensitive Information into Log File 0.3%
• CVE-2025-47410 High 8.8 Apache Geode: CSRF attacks through GET requests to the Management and Monitoring REST API that can execute gfsh commands on the target system 0.4%
• CVE-2024-44088 Medium 6.1 Apache Geode: Reflected XSS 0.7%
• CVE-2022-34870 Medium 5.4 Apache Geode stored Cross-Site Scripting (XSS) via data injection vulnerability in Pulse web application 1.4%
• CVE-2022-37023 Unrated Apache Geode deserialization of untrusted data flaw when using REST API on Java 8 or Java 11 1.8%
• CVE-2022-37022 Unrated Apache Geode deserialization of untrusted data flaw when using JMX over RMI on Java 11 1.5%
• CVE-2022-37021 Unrated Apache Geode deserialization of untrusted data flaw when using JMX over RMI on Java 8. 2.6%
• CVE-2021-34797 Unrated Apache Geode project log file redaction of sensitive information vulnerability 2.6%