All products

org.apache.geode:geode-core

Maven · Package
17 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Insertion of Sensitive Information into Log File in Apache GeodeCVE-2021-34797 · GHSA-MW25-F5R2-HPC6 org.apache.geode:geode-core Maven High Fix reported
Apache Geode vulnerable to Incorrect AuthorizationCVE-2017-15695 · GHSA-JMG4-X4VP-6C6X org.apache.geode:geode-core Maven High Fix reported
Apache Geode SSL endpoint verification vulnerabilityCVE-2019-10091 · GHSA-WC4X-4GM2-74J8 org.apache.geode:geode-core Maven High Fix reported
Apache Geode vulnerable to Deserialization of Untrusted DataCVE-2022-37021 · GHSA-Q4Q3-R45F-7GWG org.apache.geode:geode-core Maven Critical Fix reported
Apache Geode versions deserialization of untrusted datawhen using JMX over RMI on Java 11CVE-2022-37022 · GHSA-QF8G-VPWP-6579 org.apache.geode:geode-core Maven High Fix reported
Apache Geode versions prior to 1.15.0 are vulnerable to a deserialization of untrusted dataCVE-2022-37023 · GHSA-72X9-48MC-PHH6 org.apache.geode:geode-core Maven Medium Fix reported
Apache Geode vulnerable to Cross-Site ScriptingCVE-2022-34870 · GHSA-373R-9MG8-3JC4 org.apache.geode:geode-core Maven Medium Fix reported
Apache Geode gfsh query vulnerabilityCVE-2017-9794 · GHSA-37M3-QP37-X3C6 org.apache.geode:geode-core Maven Medium Fix reported
Apache Geode vulnerable to Exposure of Sensitive InformationCVE-2017-9797 · GHSA-VH98-FQFC-4HJ3 org.apache.geode:geode-core Maven Medium Fix reported
Apache Geode OQL bind parameter vulnerabilityCVE-2017-9796 · GHSA-Q7CP-R6CJ-HPF5 org.apache.geode:geode-core Maven Medium Fix reported
Apache Geode OQL method invocation vulnerabilityCVE-2017-9795 · GHSA-6M68-3W55-6MX4 org.apache.geode:geode-core Maven High Fix reported
Apache Geode information disclosure vulnerabilityCVE-2017-5649 · GHSA-2GW6-73WC-X88F org.apache.geode:geode-core Maven High Fix reported
Argument Injection in Apache Geode serverCVE-2017-15694 · GHSA-P426-QW2P-V95V org.apache.geode:geode-core Maven Medium Fix reported
Apache Geode unsafe deserialization in TcpServerCVE-2017-15692 · GHSA-W395-HPQ9-7XWR org.apache.geode:geode-core Maven Critical Fix reported
Apache Geode configuration request authorization vulnerabilityCVE-2017-15696 · GHSA-G569-49WG-JX5F org.apache.geode:geode-core Maven High Fix reported
Apache Geode unsafe deserialization of application objectsCVE-2017-15693 · GHSA-95M2-P98F-24R5 org.apache.geode:geode-core Maven High Fix reported
Apache Geode gfsh authorization vulnerabilityCVE-2017-12622 · GHSA-H22R-H77W-2G5F org.apache.geode:geode-core Maven High Fix reported