Apache Sling Engine vulnerabilities and CVEs
Known vulnerabilities affecting Apache Sling Engine, with exploit availability attached to each one, so you can tell a flaw someone has written code for from one nobody has.
3 vulnerabilities tracked.
- — Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Apache Sling Engine.
- — Improper output neutralization for logs in Apache Sling Engine.
- — Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling Engine.
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that Apache Sling Engine is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other products tracked here
Chrome Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 macOS Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Zephyr Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Android Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions iOS and iPadOS Windows Server 2022 Windows 11 Version 24H2 Red Hat Enterprise Linux 9.6 Extended Update Support Windows 11 version 26H1 Windows Server 2025 (Server Core installation) Windows 11 Version 25H2 Windows Server 2025 Windows Server 2019 (Server Core installation) Windows Server 2019 Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Red Hat Enterprise Linux 8.8 Telecommunications Update Service Windows 10 Version 21H2 Windows 10 Version 1809