CVE-2022-34870: Apache Geode

Medium severity, CVSS 5.4. EPSS: 1.2% chance of exploitation in the next 30 days.

Apache Geode versions up to 1.15.0 are vulnerable to a Cross-Site Scripting (XSS) via data injection when using Pulse web application to view Region entries.

Affected products

• Apache Geode: up to and including 1.15.0

Published 2022-10-25. Last modified 2026-06-17.