Apache Sling vulnerabilities

4 CVEs affecting Apache Sling, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-6798, published 2017-07-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-0956, published 2016-02-10. High severity, CVSS 7.5. EPSS: 51.2% chance of exploitation in the next 30 days. The Servlets Post component 2.3.6 in Apache Sling, as used in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0, allows remote attackers to obtain sensitive information via unspecified vectors.
CVE-2016-6798, published 2017-07-19. Critical severity, CVSS 9.8. EPSS: 3.7% chance of exploitation in the next 30 days. In the XSS Protection API module before 1.0.12 in Apache Sling, the method XSS.getValidXML() uses an insecure SAX parser to validate the input string, which allows for XXE attacks in all scripts…
CVE-2013-4390, published 2013-10-24. Medium severity, CVSS 5.8. EPSS: 3.1% chance of exploitation in the next 30 days. Open redirect vulnerability in the AbstractAuthenticationFormServlet in the Auth Core (org.apache.sling.auth.core) bundle before 1.1.4 in Apache Sling allows remote attackers to redirect users to…
CVE-2016-5394, published 2017-07-19. Medium severity, CVSS 6.1. EPSS: 2.6% chance of exploitation in the next 30 days. In the XSS Protection API module before 1.0.12 in Apache Sling, the encoding done by the XSSAPI.encodeForJSString() method is not restrictive enough and for some input patterns allows script tags to…