CVE-2022-37022

🗓️ 31 Aug 2022 07:00:15Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 102 Views

CVE-2022-37022 Apache Geode version up to 1.13.2 vulnerable to deserialization fla

Reporter	Title	Published	Views	Family All 14
ATTACKERKB	CVE-2022-37022	31 Aug 202207:15	–	attackerkb
Circl	CVE-2022-37022	31 Aug 202212:36	–	circl
CNNVD	Apache Geode 代码问题漏洞	31 Aug 202200:00	–	cnnvd
CNVD	Apache Geode Remote Code Execution Vulnerability (CNVD-2022-83595)	1 Sep 202200:00	–	cnvd
Cvelist	CVE-2022-37022 Apache Geode deserialization of untrusted data flaw when using JMX over RMI on Java 11	31 Aug 202207:00	–	cvelist
EUVD	EUVD-2022-6916	3 Oct 202520:07	–	euvd
Github Security Blog	Apache Geode versions deserialization of untrusted datawhen using JMX over RMI on Java 11	1 Sep 202200:00	–	github
NVD	CVE-2022-37022	31 Aug 202207:15	–	nvd
OSV	GHSA-QF8G-VPWP-6579 Apache Geode versions deserialization of untrusted datawhen using JMX over RMI on Java 11	1 Sep 202200:00	–	osv
Prion	Deserialization of untrusted data	31 Aug 202207:15	–	prion

NVD

Vulners

Node

apache geodeRange≤1.12.2

apache geodeRange1.13.0–1.13.2

[
  {
    "platforms": [
      "Java 11"
    ],
    "product": "Apache Geode",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "1.12.2",
        "status": "affected",
        "version": "Apache Geode",
        "versionType": "custom"
      }
    ]
  }
]