Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
apache solr vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv3
CVE-2018-11802
In Apache Solr, the cluster can be partitioned into multiple collections and only a subset of nodes actually host any given collection. However, if a node receives a request for a collection it does not host, it proxies the request to a relevant node and serves the request. Solr ...
Apache Solr
4.3
CVSSv3
CVE-2016-5664
Directory traversal vulnerability on Accellion Kiteworks appliances before kw2016.03.00 allows remote malicious users to read files via a crafted URI.
Accellion Kiteworks Appliance
2.7
CVSSv3
CVE-2021-28163
In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is a symlink, the contents of the webapps directory is deployed as a static webapp, inadvertently serving the webapps themselves and anything else that m...
Eclipse Jetty 11.0.0
Eclipse Jetty 10.0.0
Eclipse Jetty 11.0.1
Eclipse Jetty 10.0.1
Eclipse Jetty
Fedoraproject Fedora 32
Fedoraproject Fedora 33
Fedoraproject Fedora 34
Apache Solr 8.8.1
Apache Ignite
Netapp Santricity Cloud Connector -
Netapp Snapcenter -
Netapp E-series Performance Analyzer -
Netapp E-series Santricity Web Services -
Netapp Virtual Storage Console
Netapp Storage Replication Adapter For Clustered Data Ontap
Netapp Vasa Provider For Clustered Data Ontap
Netapp Cloud Manager -
Netapp Snapcenter Plug-in -
Netapp Element Plug-in For Vcenter Server -
Netapp E-series Santricity Os Controller
Oracle Banking Digital Experience 20.1
NA
CVE-2024-31391
Insertion of Sensitive Information into Log File vulnerability in the Apache Solr Operator. This issue affects all versions of the Apache Solr Operator from 0.3.0 up to and including 0.8.0. When asked to bootstrap Solr security, the operator will enable basic authentication and c...
NA
CVE-2015-5506
The Apache Solr Real-Time module 7.x-1.x prior to 7.x-1.2 for Drupal does not check the status of an entity when indexing, which allows remote malicious users to obtain information about unpublished content via a search.
Apache Solr Real-time Project Apache Solr Real-time 7.x-1.0
Apache Solr Real-time Project Apache Solr Real-time 7.x-1.1
NA
CVE-2014-3628
Cross-site scripting (XSS) vulnerability in the Admin UI Plugin / Stats page in Apache Solr 4.x prior to 4.10.3 allows remote malicious users to inject arbitrary web script or HTML via the fieldvaluecache object.
Apache Solr 4.5.0
Apache Solr 4.7.1
Apache Solr 4.10.2
Apache Solr 4.0.0
Apache Solr 4.6.1
Apache Solr 4.2.1
Apache Solr 4.10.1
Apache Solr 4.3.0
Apache Solr 4.8.0
Apache Solr 4.9.1
Apache Solr 4.7.2
Apache Solr 4.4.0
Apache Solr 4.2.0
Apache Solr 4.6.0
Apache Solr 4.5.1
Apache Solr 4.3.1
Apache Solr 4.7.0
Apache Solr 4.10.0
Apache Solr 4.8.1
Apache Solr 4.1.0
Apache Solr 4.9.0
NA
CVE-2012-6612
The (1) UpdateRequestHandler for XSLT or (2) XPathEntityProcessor in Apache Solr prior to 4.1 allows remote malicious users to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Ent...
Apache Solr
Apache Solr 4.0.0
NA
CVE-2013-6407
The UpdateRequestHandler for XML in Apache Solr prior to 4.1 allows remote malicious users to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Apache Solr 3.6.1
Apache Solr 3.6.0
Apache Solr 4.0.0
Apache Solr 3.6.2
Apache Solr
NA
CVE-2013-6408
The DocumentAnalysisRequestHandler in Apache Solr prior to 4.3.1 does not properly use the EmptyEntityResolver, which allows remote malicious users to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, relate...
Apache Solr 4.0.0
Apache Solr 3.6.1
Apache Solr 4.2.1
Apache Solr 3.6.0
Apache Solr 4.2.0
Apache Solr 3.6.2
Apache Solr 4.1.0
Apache Solr
NA
CVE-2013-6397
Directory traversal vulnerability in SolrResourceLoader in Apache Solr prior to 4.6 allows remote malicious users to read arbitrary files via a .. (dot dot) or full pathname in the tr parameter to solr/select/, when the response writer (wt parameter) is set to XSLT. NOTE: this ca...
Apache Solr 4.5.0
Apache Solr 4.0.0
Apache Solr
Apache Solr 4.2.1
Apache Solr 4.3.0
Apache Solr 4.4.0
Apache Solr 4.2.0
Apache Solr 4.3.1
Apache Solr 4.1.0
1 Github repository
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
firmware
CVE-2023-52866
CVE-2024-4367
CVE-2024-1721
CVE-2023-34992
XML injection
CVE-2023-52817
SQL
CVE-2023-52855
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
NEXT »