Vendor/product archive

apache / sling_api CVEs

Beta · best-effort

2 CVEs tagged to apache / sling_api — 0 Critical, 0 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to apache vendor archive

CVE-2022-32549

Published Jun 22, 2022

Apache Sling Commons Log <= 5.4.0 and Apache Sling API <= 2.25.0 are vulnerable to log injection. The ability to forge logs may allow an attacker to cover tracks by injecting fake…

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2015-2944

Published Jun 2, 2015

Multiple cross-site scripting (XSS) vulnerabilities in Apache Sling API before 2.2.2 and Apache Sling Servlets Post before 2.1.2 allow remote attackers to inject arbitrary web scr…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1