Product by Apache Software Foundation

    Apache Sling XSS

    6 known vulnerabilities in Apache Sling XSS (Apache Software Foundation), 0 of them actively exploited (CISA KEV).

    Key figures

    6

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Apache Sling XSS (Apache Software Foundation)
    MediumCVE-2017-15717

    Apache Sling: Cross-Site Scripting (XSS)

    also in 1 other product

    		6.1
    MediumCVE-2026-91852

    Apache Sling XSS: CWE-79 multiple raw-string break-outs and ReDOS in XSSImpl

    also in 3 other products

    		6.1
    MediumCVE-2026-91928

    Apache Sling XSS: Cross-site Scripting

    also in 3 other products

    		6.1
    MediumCVE-2026-91999

    Apache Sling XSS: Improper escaping in the XSS Webconsole plugin

    also in 3 other products

    		6.1
    MediumCVE-2026-92001

    Apache Sling XSS: Missing parser resource limits

    also in 3 other products

    		6.1
    MediumCVE-2026-73192

    Apache Sling XSS: XSS possible through XSSAPI.getValidHref()

    also in 3 other products

    		6.1

    All products by Apache Software Foundation