Sling Api

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-32549 Maven MEDIUM This Month

Apache Sling Commons Log <= 5.4.0 and Apache Sling API <= 2.25.0 are vulnerable to log injection. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Apache Code Injection Sling Api Sling Commons Log

NVD

CVSS 3.1

5.3

EPSS

2.3%

CVE-2015-2944 Maven MEDIUM POC PATCH This Month

Multiple cross-site scripting (XSS) vulnerabilities in Apache Sling API before 2.2.2 and Apache Sling Servlets Post before 2.1.2 allow remote attackers to inject arbitrary web script or HTML via the. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available.

XSS Apache Sling Api Sling Servlets Post

NVD

CVSS 2.0

4.3

EPSS

2.9%

CVE-2022-32549 Maven

EPSS 2% CVSS 5.3

MEDIUM This Month

Apache Code Injection Sling Api +1

NVD

CVE-2015-2944 Maven

EPSS 3% CVSS 4.3

MEDIUM POC PATCH This Month

XSS Apache Sling Api +1

NVD