system
Identify the affected product in <CVE-2017-15717>.
user
Which product is affected by <CVE-2017-15717>?
assistant
The affected product is Apache Sling and version: XSS Protection API 1.0.4 to 1.0.18, XSS Protection API Compat 1.1.0, XSS Protection API 2.0.0.