Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2022-37023

Apache Geode versions prior to 1.15.0 are vulnerable to a deserialization of untrusted data flaw when using REST API on Java 8 or Java 11. Any user wishing to protect against deserialization attacks involving REST APIs should upgrade to Apache Geode 1.15 and follow the documentation for details on enabling "validate-serializable-objects=true" and specifying any user classes that may be serialized/deserialized with "serializable-object-filter". Enabling "validate-serializable-objects" may impact performance.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 42.5%
CVSS Severity
CVSS v3 Score 6.5
Products affected by CVE-2022-37023
  • Apache » Geode » Version: 1.0.0
    cpe:2.3:a:apache:geode:1.0.0
  • Apache » Geode » Version: 1.1.0
    cpe:2.3:a:apache:geode:1.1.0
  • Apache » Geode » Version: 1.1.1
    cpe:2.3:a:apache:geode:1.1.1
  • Apache » Geode » Version: 1.10.0
    cpe:2.3:a:apache:geode:1.10.0
  • Apache » Geode » Version: 1.11.0
    cpe:2.3:a:apache:geode:1.11.0
  • Apache » Geode » Version: 1.12.0
    cpe:2.3:a:apache:geode:1.12.0
  • Apache » Geode » Version: 1.12.1
    cpe:2.3:a:apache:geode:1.12.1
  • Apache » Geode » Version: 1.12.2
    cpe:2.3:a:apache:geode:1.12.2
  • Apache » Geode » Version: 1.12.3
    cpe:2.3:a:apache:geode:1.12.3
  • Apache » Geode » Version: 1.12.4
    cpe:2.3:a:apache:geode:1.12.4
  • Apache » Geode » Version: 1.12.5
    cpe:2.3:a:apache:geode:1.12.5
  • Apache » Geode » Version: 1.12.6
    cpe:2.3:a:apache:geode:1.12.6
  • Apache » Geode » Version: 1.12.7
    cpe:2.3:a:apache:geode:1.12.7
  • Apache » Geode » Version: 1.12.8
    cpe:2.3:a:apache:geode:1.12.8
  • Apache » Geode » Version: 1.13.0
    cpe:2.3:a:apache:geode:1.13.0
  • Apache » Geode » Version: 1.13.1
    cpe:2.3:a:apache:geode:1.13.1
  • Apache » Geode » Version: 1.13.2
    cpe:2.3:a:apache:geode:1.13.2
  • Apache » Geode » Version: 1.13.3
    cpe:2.3:a:apache:geode:1.13.3
  • Apache » Geode » Version: 1.13.4
    cpe:2.3:a:apache:geode:1.13.4
  • Apache » Geode » Version: 1.13.5
    cpe:2.3:a:apache:geode:1.13.5
  • Apache » Geode » Version: 1.13.6
    cpe:2.3:a:apache:geode:1.13.6
  • Apache » Geode » Version: 1.14.0
    cpe:2.3:a:apache:geode:1.14.0
  • Apache » Geode » Version: 1.14.1
    cpe:2.3:a:apache:geode:1.14.1
  • Apache » Geode » Version: 1.2.0
    cpe:2.3:a:apache:geode:1.2.0
  • Apache » Geode » Version: 1.2.1
    cpe:2.3:a:apache:geode:1.2.1
  • Apache » Geode » Version: 1.3.0
    cpe:2.3:a:apache:geode:1.3.0
  • Apache » Geode » Version: 1.4.0
    cpe:2.3:a:apache:geode:1.4.0
  • Apache » Geode » Version: 1.5.0
    cpe:2.3:a:apache:geode:1.5.0
  • Apache » Geode » Version: 1.6.0
    cpe:2.3:a:apache:geode:1.6.0
  • Apache » Geode » Version: 1.7.0
    cpe:2.3:a:apache:geode:1.7.0
  • Apache » Geode » Version: 1.8.0
    cpe:2.3:a:apache:geode:1.8.0
  • Apache » Geode » Version: 1.9.0
    cpe:2.3:a:apache:geode:1.9.0
  • Apache » Geode » Version: 1.9.1
    cpe:2.3:a:apache:geode:1.9.1
  • Apache » Geode » Version: 1.9.2
    cpe:2.3:a:apache:geode:1.9.2


Products
Pricing
Contact Us

Shodan ® - All rights reserved