diff --git a/boms/geode-all-bom/src/test/resources/expected-pom.xml b/boms/geode-all-bom/src/test/resources/expected-pom.xml
index 88c63ac41f0..f80c2cf7fa4 100644
--- a/boms/geode-all-bom/src/test/resources/expected-pom.xml
+++ b/boms/geode-all-bom/src/test/resources/expected-pom.xml
@@ -165,7 +165,7 @@
       <dependency>
         <groupId>commons-logging</groupId>
         <artifactId>commons-logging</artifactId>
-        <version>1.2</version>
+        <version>1.3.5</version>
       </dependency>
       <dependency>
         <groupId>commons-modeler</groupId>
diff --git a/build-tools/geode-dependency-management/src/main/groovy/org/apache/geode/gradle/plugins/DependencyConstraints.groovy b/build-tools/geode-dependency-management/src/main/groovy/org/apache/geode/gradle/plugins/DependencyConstraints.groovy
index 34fb141dbee..8a2eccd11ff 100644
--- a/build-tools/geode-dependency-management/src/main/groovy/org/apache/geode/gradle/plugins/DependencyConstraints.groovy
+++ b/build-tools/geode-dependency-management/src/main/groovy/org/apache/geode/gradle/plugins/DependencyConstraints.groovy
@@ -111,7 +111,7 @@ class DependencyConstraints {
         api(group: 'commons-digester', name: 'commons-digester', version: '2.1')
         api(group: 'commons-fileupload', name: 'commons-fileupload', version: '1.4')
         api(group: 'commons-io', name: 'commons-io', version: get('commons-io.version'))
-        api(group: 'commons-logging', name: 'commons-logging', version: '1.2')
+        api(group: 'commons-logging', name: 'commons-logging', version: '1.3.5')
         api(group: 'commons-modeler', name: 'commons-modeler', version: '2.0.1')
         api(group: 'commons-validator', name: 'commons-validator', version: get('commons-validator.version'))
         // Careful when upgrading this dependency: see GEODE-7370 and GEODE-8150.
diff --git a/geode-assembly/src/integrationTest/resources/assembly_content.txt b/geode-assembly/src/integrationTest/resources/assembly_content.txt
index ad9b8d82761..a47977c684f 100644
--- a/geode-assembly/src/integrationTest/resources/assembly_content.txt
+++ b/geode-assembly/src/integrationTest/resources/assembly_content.txt
@@ -974,7 +974,7 @@ lib/commons-collections-3.2.2.jar
 lib/commons-digester-2.1.jar
 lib/commons-io-2.11.0.jar
 lib/commons-lang3-3.12.0.jar
-lib/commons-logging-1.2.jar
+lib/commons-logging-1.3.5.jar
 lib/commons-modeler-2.0.1.jar
 lib/commons-validator-1.7.jar
 lib/fastutil-8.5.8.jar
diff --git a/geode-server-all/src/integrationTest/resources/dependency_classpath.txt b/geode-server-all/src/integrationTest/resources/dependency_classpath.txt
index 074b16e6cfa..3533becd550 100644
--- a/geode-server-all/src/integrationTest/resources/dependency_classpath.txt
+++ b/geode-server-all/src/integrationTest/resources/dependency_classpath.txt
@@ -8,8 +8,8 @@ commons-validator-1.7.jar
 spring-jcl-5.3.21.jar
 commons-codec-1.15.jar
 classgraph-4.8.147.jar
+commons-logging-1.3.5.jar
 jackson-databind-2.17.0.jar
-commons-logging-1.2.jar
 geode-management-0.0.0.jar
 geode-core-0.0.0.jar
 javax.activation-api-1.2.0.jar