Test ID:	1.3.6.1.4.1.25623.1.0.108888
Category:	Web application abuses
Title:	Apache Solr Multiple XXE Vulnerabilities (SOLR-12450) - Windows
Summary:	Apache Solr is prone to multiple XML external entity (XXE); vulnerabilities.
Description:	Summary: Apache Solr is prone to multiple XML external entity (XXE) vulnerabilities. Vulnerability Insight: Multiple flaws are due to improper sanitization of user input in currency.xml, enumsConfig.xml referred from schema.xml, TIKA parsecontext configuration files. Vulnerability Impact: Successful exploitation will allow attackers to gain access to sensitive information that may lead to further attacks. Affected Software/OS: Apache Solr versions from 6.0.0 to 6.6.4 and 7.0.0 to 7.3.1. Solution: Update to version 6.6.5, 7.4.0 or later. CVSS Score: 2.1 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-8026 BugTraq ID: 104690 http://www.securityfocus.com/bid/104690 https://mail-archives.apache.org/mod_mbox/lucene-solr-user/201807.mbox/%3C0cdc01d413b7%24f97ba580%24ec72f080%24%40apache.org%3E
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.