Test ID:	1.3.6.1.4.1.25623.1.0.903509
Category:	Web application abuses
Title:	Apache Solr XML External Entity (XXE) Vulnerability (SOLR-3895, SOLR-5520) - Linux
Summary:	Apache Solr is prone to an XML external entity (XXE) vulnerability.
Description:	Summary: Apache Solr is prone to an XML external entity (XXE) vulnerability. Vulnerability Insight: The flaw is due to error in 'UpdateRequestHandler' and 'XPathEntityProcessor' when parsing XML entities. Vulnerability Impact: Successful exploitation will allow remote attackers to gain potentially sensitive information, cause denial of service and potentially perform other more advanced XXE attacks. Affected Software/OS: Apache Solr versions before 3.6.3 and 4.x before version 4.1.0. Solution: Update to version 3.6.3, 4.1.0 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-6407 55542 http://secunia.com/advisories/55542 59372 http://secunia.com/advisories/59372 RHSA-2013:1844 http://rhn.redhat.com/errata/RHSA-2013-1844.html RHSA-2014:0029 http://rhn.redhat.com/errata/RHSA-2014-0029.html [oss-security] 20131128 Re: CVE Request: Apache Solr XXE http://www.openwall.com/lists/oss-security/2013/11/29/2 http://svn.apache.org/viewvc/lucene/dev/branches/branch_4x/solr/CHANGES.txt?view=markup https://issues.apache.org/jira/browse/SOLR-3895 Common Vulnerability Exposure (CVE) ID: CVE-2012-6612 RedHat Security Advisories: RHSA-2013:1844 RedHat Security Advisories: RHSA-2014:0029
Copyright	Copyright (C) 2014 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.