Cocoon (Apache) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 16 known versions, newest CVE from 2025-01-27. Vendor: Apache.

CVEs of Cocoon

• CVE-2025-24783 - CVSS 7.5 (high), 2025-01-27: ** UNSUPPORTED WHEN ASSIGNED ** Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) vulnerability in Apache Cocoon. This issue affects Apache…
• CVE-2023-49733 - CVSS 9.8 (critical), 2023-11-30: Improper Restriction of XML External Entity Reference vulnerability in Apache Cocoon.This issue affects Apache Cocoon: from 2.2.0 before 2.3.0. Users are…
• CVE-2022-45135 - CVSS 9.8 (critical), 2023-11-30: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Cocoon.This issue affects Apache Cocoon: from…
• CVE-2020-11991 - CVSS 7.5 (high), 2020-09-11: When using the StreamGenerator, the code parse a user-provided XML. A specially crafted XML, including external system entities, could be used to access any…
• CVE-2003-1172 - CVSS 5 (medium), 2003-12-31: Directory traversal vulnerability in the view-source sample file in Apache Software Foundation Cocoon 2.1 and 2.2 allows remote attackers to access arbitrary…