Skip to content

Vulnerabilities of Apache Software Foundation Apache Cocoon

Is your version affected?

CVE Summary Score Published
CVE-2026-108089 ** UNSUPPORTED WHEN ASSIGNED ** Exposure of sensitive system information to an unauthorized control sphere vulnerability… Not rated Oct 20, 2026
CVE-2026-108088 ** UNSUPPORTED WHEN ASSIGNED ** Use of cache containing sensitive information vulnerability in Apache Cocoon Not rated Oct 20, 2026
CVE-2026-108087 ** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of special elements used in an SQL command ('SQL injection')… Not rated Oct 20, 2026
CVE-2026-108086 ** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity references in DTDs ('XML entity expansion')… Not rated Oct 20, 2026
CVE-2025-24783 ** UNSUPPORTED WHEN ASSIGNED ** Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) vulnerability in… Not rated Jan 27, 2025
CVE-2023-49733 Improper Restriction of XML External Entity Reference vulnerability in Apache Cocoon.This issue affects Apache Cocoon:… Not rated Nov 30, 2023
CVE-2022-45135 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Cocoon.This… Not rated Nov 30, 2023

Other Apache Software Foundation products