CVE-2017-9796: Apache Geode

Medium severity, CVSS 5.3. EPSS: 1.5% chance of exploitation in the next 30 days.

When an Apache Geode cluster before v1.3.0 is operating in secure mode, a user with read access to specific regions within a Geode cluster may execute OQL queries containing a region name as a bind parameter that allow read access to objects within unauthorized regions.

Affected products

• Apache Geode: before 1.3.0 (fixed in 1.3.0)

Published 2018-01-10. Last modified 2026-06-17.