CVE-2017-15694: Apache Geode

Medium severity, CVSS 6.5. EPSS: 2.2% chance of exploitation in the next 30 days.

When an Apache Geode server versions 1.0.0 to 1.8.0 is operating in secure mode, a user with write permissions for specific data regions can modify internal cluster metadata. A malicious user could modify this data in a way that affects the operation of the cluster.

Affected products

• Apache Geode: from 1.0.0, up to and including 1.8.0

Published 2019-06-21. Last modified 2026-06-17.