# Security Advisories

> Hannon Hill's assessments of published CVEs and other security issues as they relate to Cascade CMS, including whether Cascade Cloud and on-premise installations are affected.

URL: https://www.hannonhill.com/cascadecms/latest/articles/cascade-administration/security-advisories/index.html
category: Cascade Administration
article-type: concept
content-kind: article
release-availability: all
tags: security
updated: 2026-10-06

These articles record how Hannon Hill assessed a published vulnerability against Cascade CMS — what the issue is, whether Cascade Cloud and on-premise installations are affected, and any action an administrator needs to take. Most entries conclude that Cascade CMS is not affected; the ones that require action say so at the top of the article.

> **Reporting a vulnerability**
>
> If you believe you've found a security issue in Cascade CMS, contact our support team directly rather than filing it publicly.

## Advisories requiring action

## Tomcat and Spring

## Log4j