AC
Product
Apache Cocoon
4
CVEs
0
On KEV
7.5
Max CVSS
4
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch
Add Apache Cocoon to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-108089 | 7.5 | Oct 20 | Apache Cocoon: Unauthenticated access to diagnostic interfaces Affected: 0 |
| CVE-2026-108088 | – | Oct 20 | Apache Cocoon: Cross-user cache poisoning Affected: 0 |
| CVE-2026-108087 | – | Oct 20 | Apache Cocoon: SQL Injection Affected: 0 |
| CVE-2026-108086 | – | Oct 20 | Apache Cocoon: XEE could lead to SSRF and information disclosure Affected: 0 |
Showing 4