Apache Org.apache.sling.servlets.post vulnerabilities

• apache org.apache.sling.servlets.post Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Sling CVE-2013-2254 Fix available 5.0 MediumOctober 17, 2013
• apache org.apache.sling.servlets.post Apache Sling POST Servlets Denial of Service Vulnerability CVE-2012-2138 Public exploitFix available EPSS 14.1% 5.0 MediumJuly 9, 2012