Apache / Sling Servlets Post

2 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2017-9802	The Javascript method Sling.evalString() in Apache Sling Servlets Post before 2.3.22 uses the javascript 'eval' function to parse input strings, which allows f…	MEDIUM	6.1	Aug 14, 2017
CVE-2015-2944	Multiple cross-site scripting (XSS) vulnerabilities in Apache Sling API before 2.2.2 and Apache Sling Servlets Post before 2.1.2 allow remote attackers to inje…	MEDIUM	4.3	Jun 2, 2015

Rows per page

Showing 1 to 2 of 2 CVEs