Known vulnerabilities in Sling CMS App Core

Vendor: Apache Foundation
Software: Sling CMS App Core
Software CPE: cpe:2.3:a:apache_foundation:sling:*:*:*:*:*:*:*:*
Website: https://www.apache.org
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 5.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Sling CMS App Core Sling CMS App Core is affected by 3 known vulnerabilities: 3 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85987 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-22849		 CWE-79 Low
No
No
 1.1.6 01.02.2024 SB2023020407
#VU85986 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-46769		 CWE-79 Low
No
No
 1.1.4 01.02.2024 SB2023010705
#VU26387 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1949		 CWE-79 Low
No
No
 0.16.0 25.03.2020 SB2020032511