VendorsApachecocoonany version
Vulnerabilities

Apache Cocoon any version

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

4CVEs
CVE-2023-49733
Apache Cocoon's StreamGenerator is vulnerable to XXE injection
Published 2023-11-30 · Modified
9.8EPSS 0.013
CVE-2022-45135
Apache Cocoon: SQL injection in DatabaseCookieAuthenticatorAction
Published 2023-11-30 · Modified
9.8EPSS 0.011
CVE-2020-11991
When using the StreamGenerator, the code parse a user-provided XML. A specially crafted XML, including external system entities, could be used to access any file on the server system.
Published 2020-09-11 · Modified
7.5EPSS 0.725
CVE-2025-24783
Apache Cocoon: continuations may not be private
Published 2025-01-27 · Analyzed
7.5EPSS 0.008