Apache Sling Xss Protection Api — known CVE vulnerabilities

Every CVE whose affected-product data names Apache Sling Xss Protection Api, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2017-15717 — CVSS 6.1 (medium): A flaw in the way URLs are escaped and encoded in the org.apache.sling.xss.impl.XSSAPIImpl#getValidHref and org.apache.sling.xss.impl.XSSFil…