Junglewise Threat Intelligence

CVE-2022-37022: Apache Geode versions deserialization of untrusted datawhen using JMX over RMI on Java 11

CVE-2022-37022 · Severity: low · CVSS 3.1 · Published 2022-09-01

Technologies: org.apache.geode:geode-core (Maven). Vendors: Maven.

Executive brief

Apache Geode versions deserialization of untrusted datawhen using JMX over RMI on Java 11

Affected products

  • Maven org.apache.geode:geode-core

Related threats