Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apache solr 4.0.0 vulnerabilities and exploits

(subscribe to this query)

6.4
CVSSv2
CVE-2013-6408
The DocumentAnalysisRequestHandler in Apache Solr before 4.3.1 does not properly use the EmptyEntityResolver, which allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an...
Apache Solr 3.6.0Apache Solr 3.6.1Apache Solr 3.6.2Apache Solr 4.0.0Apache Solr 4.1.0Apache Solr 4.2.0Apache Solr 4.2.1Apache Solr
7.5
CVSSv2
CVE-2012-6612
The (1) UpdateRequestHandler for XSLT or (2) XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity...
Apache SolrApache Solr 4.0.0
4.3
CVSSv2
CVE-2013-6397
Directory traversal vulnerability in SolrResourceLoader in Apache Solr before 4.6 allows remote attackers to read arbitrary files via a .. (dot dot) or full pathname in the tr parameter to solr/select/, when the response writer (wt parameter) is set to XSLT. NOTE: this can be...
Apache Solr 4.0.0Apache Solr 4.1.0Apache Solr 4.2.0Apache Solr 4.2.1Apache Solr 4.3.0Apache Solr 4.3.1Apache Solr 4.4.0Apache Solr 4.5.0Apache Solr
6.4
CVSSv2
CVE-2013-6407
The UpdateRequestHandler for XML in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue....
Apache Solr 3.6.0Apache Solr 3.6.1Apache Solr 3.6.2Apache SolrApache Solr 4.0.0
4.3
CVSSv2
CVE-2014-3628
Cross-site scripting (XSS) vulnerability in the Admin UI Plugin / Stats page in Apache Solr 4.x before 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the fieldvaluecache object....
Apache Solr 4.0.0Apache Solr 4.1.0Apache Solr 4.2.0Apache Solr 4.2.1Apache Solr 4.3.0Apache Solr 4.3.1Apache Solr 4.4.0Apache Solr 4.5.0Apache Solr 4.5.1Apache Solr 4.6.0Apache Solr 4.6.1Apache Solr 4.7.0Apache Solr 4.7.1Apache Solr 4.7.2Apache Solr 4.8.0Apache Solr 4.8.1Apache Solr 4.9.0Apache Solr 4.9.1Apache Solr 4.10.0Apache Solr 4.10.1Apache Solr 4.10.2
5
CVSSv2
CVE-2019-12401
Solr versions 1.3.0 to 1.4.1, 3.1.0 to 3.6.2 and 4.0.0 to 4.10.4 are vulnerable to an XML resource consumption attack (a.k.a. Lol Bomb) via it’s update handler.?By leveraging XML DOCTYPE and ENTITY type elements, the attacker can create a pattern that will expand when the...
Apache Solr
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2021-1647CVE-2021-20491CVE-2021-28310CVE-2021-30487CVE-2021-21087XPath injectionbrute forceCVE-2020-7308remote attackers
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook