NVD

Id
24894  
Name
CVE-2015-2944  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Apache Sling API before 2.2.2 and Apache Sling Servlets Post before 2.1.2 allow remote attackers to inject arbitrary web script or HTML via the URI, related to (1) org/apache/sling/api/servlets/HtmlResponse and (2) org/apache/sling/servlets/post/HtmlResponse.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-06-02  
Modified Date
2016-12-02  
Seq
2015-2944  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
131344 24894 CVE-2015-2944 JVN#61328139  View
131345 24894 CVE-2015-2944 JVNDB-2015-000069  View
131346 24894 CVE-2015-2944 74839  View
131347 24894 CVE-2015-2944 https://issues.apache.org/jira/browse/SLING-2082  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
5557 JVNDB-2015-000069 Apache Sling の Sling API コンポーネントおよび Servlets Post コンポーネントにおけるクロスサイトスクリプティングの脆弱性 The Apache Software Foundation が提供する Apache Sling はオープンソースのウェブアプリケーションフレームワークです。 CVE-2015-2944 80169 CVE-2015-2944 24894 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-000069.html 2015-05-27 2015-06-04 View