Sling Api (Apache) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 39 known versions, newest CVE from 2022-06-22. Vendor: Apache.

CVEs of Sling Api

• CVE-2022-32549 - CVSS 5.3 (medium), 2022-06-22: Apache Sling Commons Log <= 5.4.0 and Apache Sling API <= 2.25.0 are vulnerable to log injection. The ability to forge logs may allow an attacker to cover…
• CVE-2015-2944 - CVSS 4.3 (medium), 2015-06-02: Multiple cross-site scripting (XSS) vulnerabilities in Apache Sling API before 2.2.2 and Apache Sling Servlets Post before 2.1.2 allow remote attackers to…