Apache Sling Vulnerabilities
Apache Apache Sling vulnerabilities.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Malicious Code Execution via Path Traversal in Apache Sling Servlets Resolver
CVE-2024-23673ApacheApache Sling Servlets ...8.5HIGHApache Sling Engine: Include-based XSS
CVE-2022-45064ApacheApache Sling Engine9CRITICALApache Sling Resource Merger: Requests to certain paths managed by the Apache Sling Resource Merger can lead to DoS
CVE-2023-26513ApacheApache Sling Resource ...7.5HIGHApache Sling does not allow to handle i18n content in a secure way
CVE-2023-25621ApacheApache Sling6.5MEDIUMJNDI injection into Apache sling-org-apache-sling-jcr-base
CVE-2023-25141ApacheApache Sling Jcr Base7.5HIGHApache Sling App CMS: XSS in CMS Reference / UI Components
CVE-2023-22849ApacheApache Sling App Cms6.1MEDIUMApache Sling App CMS: XSS in CMS Site Group Detail
CVE-2022-46769ApacheApache Sling App Cms5.4MEDIUMXSS in Sling CMS Reference App Taxonomy Path
CVE-2022-43670ApacheApache Sling App Cms5.4MEDIUMlog injection in Sling logging
CVE-2022-32549ApacheApache Sling5.3MEDIUMSMTPS server hostname not checked when making TLS connection to SMTPS server
CVE-2021-44549ApacheApache Sling Commons M...7.4HIGHReflected XSS Vulnerability in Sling CMS by Apache
CVE-2020-1949ApacheApache Sling6.1MEDIUMXSS Vulnerability in Apache Sling XSS Protection API
CVE-2017-15717ApacheApache Sling6.1MEDIUMArbitrary File Import Vulnerability in Apache Sling JCR ContentLoader
CVE-2012-3353ApacheApache Sling7.5HIGHAuthentication Flaw in Apache Sling Authentication Service
CVE-2017-15700ApacheApache Sling8.8HIGHCross-Site Scripting Vulnerability in Apache Sling XSS Protection API
CVE-2016-5394ApacheApache Sling6.1MEDIUMCross-Site Scripting Vulnerability in Apache Sling XSS Protection API
CVE-2016-6798ApacheApache Sling👾🟡9.8CRITICAL