Apache Software Foundation Cocoon vulnerabilities

• apache software foundation cocoon Apache Cocoon: Unauthenticated access to diagnostic interfaces CVE-2026-108089 7.5 HighOctober 20, 2026
• apache software foundation cocoon Apache Cocoon: Cross-user cache poisoning CVE-2026-108088 7.5 HighOctober 20, 2026
• apache software foundation cocoon Apache Cocoon: SQL Injection CVE-2026-108087 8.8 HighOctober 20, 2026
• apache software foundation cocoon Apache Cocoon: XEE could lead to SSRF and information disclosure CVE-2026-108086 7.5 HighOctober 20, 2026
• apache cocoon Apache Cocoon: continuations may not be private CVE-2025-24783 7.5 HighJanuary 27, 2025
• apache cocoon Apache Cocoon's StreamGenerator is vulnerable to XXE injection CVE-2023-49733 Fix available 9.8 CriticalNovember 30, 2023
• apache cocoon Apache Cocoon: SQL injection in DatabaseCookieAuthenticatorAction CVE-2022-45135 Fix available 9.8 CriticalNovember 30, 2023
• apache cocoon When using the StreamGenerator, the code parse a user-provided XML. A specially crafted XML,... CVE-2020-11991 EPSS 72.5% 7.5 HighSeptember 11, 2020