CVE-2017-9795: Apache Geode

High severity, CVSS 7.5. EPSS: 4.2% chance of exploitation in the next 30 days.

When an Apache Geode cluster before v1.3.0 is operating in secure mode, a user with read access to specific regions within a Geode cluster may execute OQL queries that allow read and write access to objects within unauthorized regions. In addition a user could invoke methods that allow remote code execution.

Affected products

• Apache Geode: before 1.3.0 (fixed in 1.3.0)

Published 2018-01-10. Last modified 2026-06-17.