1. CVE-Search
  2. CVE-2012-6612
ID CVE-2012-6612
Summary The (1) UpdateRequestHandler for XSLT or (2) XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, different vectors than CVE-2013-6407.
References
Vulnerable Configurations
  • cpe:2.3:a:apache:solr:1.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:1.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:1.2:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:1.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:1.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:1.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:1.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:1.4.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:1.4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:1.4.1:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:1.4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:3.1:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:3.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:3.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:3.2:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:3.2:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:3.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:3.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:3.3:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:3.3:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:3.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:3.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:3.4.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:3.4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:3.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:3.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:3.6.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:3.6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:3.6.1:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:3.6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:3.6.2:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:3.6.2:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:4.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:4.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:4.0.0:-:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:4.0.0:-:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:4.0.0:alpha:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:4.0.0:alpha:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:4.0.0:beta:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:4.0.0:beta:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 08-03-2014 - 05:02)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
redhat via4
advisories
  • rhsa
    id RHSA-2013:1844
  • rhsa
    id RHSA-2014:0029
refmap via4
confirm
Last major update 08-03-2014 - 05:02
Published 07-12-2013 - 21:55
Last modified 08-03-2014 - 05:02
Back to Top