Product by Apache Software Foundation

    Apache Sling Engine

    4 known vulnerabilities in Apache Sling Engine (Apache Software Foundation), 0 of them actively exploited (CISA KEV).

    Key figures

    4

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Apache Sling Engine (Apache Software Foundation)
    CriticalCVE-2022-45064

    Apache Sling Engine: Include-based XSS

    also in 1 other product

    		8.0
    Not ratedCVE-2026-103866

    Apache Sling Engine: HTTP Request/Response Smuggling

    also in 1 other product

    		—
    Not ratedCVE-2026-103864

    Apache Sling Engine: Request-derived values reach log sinks without CR/LF neutralization

    also in 1 other product

    		—
    Not ratedCVE-2026-103863

    Apache Sling Engine: Include-protection mitigations bypassable via uncovered response-wrapper paths

    also in 1 other product

    		—

    All products by Apache Software Foundation