Apache Sling App Cms
Approved changes feed: RSS · Atom
cpe:2.3:a:apache_software_foundation:apache_sling_app_cms:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Apache Software Foundation (f563070d-e18f-561b-b86c-987936937e8a) |
|---|---|
| Product | Apache Sling App Cms (26ea986b-45ae-5289-8aba-4e0cfaa83fce) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-22849 |
vulnerable | 2026-06-08 05:54:27.232862 |
Apache Sling App CMS: XSS in CMS Reference / UI Components
An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version 1.1.4 and prior may allow an authenticated remote attacker to perform a reflected cross-site scripting (XSS) attack in multiple features.
Upgrade to Apache Sling App CMS >= 1.1.6
Published: 2023-02-04T20:37:05.831Z
Updated: 2025-03-25T18:51:46.346Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46769 |
vulnerable | 2026-06-08 05:50:39.411317 |
Apache Sling App CMS: XSS in CMS Site Group Detail
An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version 1.1.2 and prior may allow an authenticated remote attacker to perform a reflected cross-site scripting (XSS) attack in the site group feature.
Upgrade to Apache Sling App CMS >= 1.1.4
Published: 2023-01-09T10:14:56.823Z
Updated: 2025-04-09T19:26:54.690Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43670 |
vulnerable | 2026-06-08 05:49:33.707570 |
XSS in Sling CMS Reference App Taxonomy Path
An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version 1.1.0 and prior may allow an authenticated remote attacker to perform a reflected cross site scripting (XSS) attack in the taxonomy management feature.
Published: 2022-11-02T00:00:00.000Z
Updated: 2025-05-02T20:28:50.391Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.