[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f6IYzJD8i-dbORIyL7K_xFWnka9pK7QNCg_nA4rLIyys":3,"g5a-ex:apache\u002Fsling_xss_protection_api_compat@*":50,"g5a-family:apache\u002Fsling_xss_protection_api_compat":52},{"success":4,"data":5},true,{"product":6,"versions":17,"topVulnerabilitiesByEpss":19,"kevVulnerabilities":27,"seoMetadata":28,"meta":47},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":9,"kevCount":10,"lastCveUpdate":11,"versions":12,"description":16},"apache","sling_xss_protection_api_compat",1,0,"2018-01-10",[13],{"version":14,"cve_count":9,"kev_count":10,"has_kev":15},"1.1.0",false,"Sling Xss Protection Api Compat by Apache is a technology product with 1 tracked version and 1 known security vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[18],{"version":14,"cve_count":9,"kev_count":10,"has_kev":15},[20],{"cveId":21,"description":22,"publishedDate":11,"cvssScore":23,"cvssVersion":24,"severity":25,"isKev":15,"epssScore":26},"CVE-2017-15717","A flaw in the way URLs are escaped and encoded in the org.apache.sling.xss.impl.XSSAPIImpl#getValidHref and org.apache.sling.xss.impl.XSSFilterImpl#isValidHref allows special crafted URLs to pass as valid, although they carry XSS payloads. The affected versions are Apache Sling XSS Protection API 1.0.4 to 1.0.18, Apache Sling XSS Protection API Compat 1.1.0 and Apache Sling XSS Protection API 2.0.0.",6.1,"v3.0","Medium",0.0291,[],{"title":29,"metaDescription":30,"keywords":31,"structuredData":32},"Sling Xss Protection Api Compat by Apache - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Sling Xss Protection Api Compat by Apache covering 1 version with 1 tracked vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Sling Xss Protection Api Compat vulnerabilities, Sling Xss Protection Api Compat security, Sling Xss Protection Api Compat CVE, Apache Sling Xss Protection Api Compat, Sling Xss Protection Api Compat threat intelligence, Apache security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":33,"@type":34,"name":35,"description":30,"url":36,"manufacturer":37,"applicationCategory":41,"softwareVersion":42,"mainEntity":43},"https:\u002F\u002Fschema.org","SoftwareApplication","Sling Xss Protection Api Compat","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fapache\u002Fsling_xss_protection_api_compat",{"@type":38,"name":39,"url":40},"Organization","Apache","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fapache","Security Software","1 versions tracked",{"@type":44,"name":45,"description":46,"vulnerabilityCount":9,"dateModified":11},"SecurityVulnerability","Sling Xss Protection Api Compat Security Vulnerabilities","Security vulnerabilities affecting Sling Xss Protection Api Compat by Apache",{"totalVersions":9,"totalVulnerabilities":9,"kevVulnerabilities":10,"lastUpdated":11,"generatedAt":48,"apiVersion":49},"2026-10-18T23:02:52.980Z","3.0",{"rows":51,"total":10,"capped":15,"failed":10},[],[]]