Apache Sling Authentication Service — known CVE vulnerabilities

Every CVE whose affected-product data names Apache Sling Authentication Service, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2017-15700 — CVSS 8.8 (high): A flaw in the org.apache.sling.auth.core.AuthUtil#isRedirectValid method in Apache Sling Authentication Service 1.4.0 allows an attacker…