title: Apache Geode stored Cross-Site Scripting (XSS) via data injection vulnerability in Pulse web application
description: Apache Geode versions up to 1.15.0 are vulnerable to a Cross-Site Scripting (XSS) via data injection when using Pulse web application to view Region entries.
problem types: Cross-Site Scripting (XSS) via data injection
affected:
{
vendor: Apache Software Foundation
product: Apache Geode
versions:
version: Apache Geode, status: affected, lessThanOrEqual: 1.15.0, versionType: custom
}
metrics:
other: [
type: unknown
content: {'other': 'high'}
]