1. CVE-Search
  2. CVE-2017-12629
ID CVE-2017-12629
Summary Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses Lucene, is NOT vulnerable to this. Note that the XML external entity expansion vulnerability occurs in the XML Query Parser which is available, by default, for any query request with parameters deftype=xmlparser and can be exploited to upload malicious data to the /upload request handler or as Blind XXE using ftp wrapper in order to read arbitrary local files from the Solr server. Note also that the second vulnerability relates to remote code execution using the RunExecutableListener available on all affected versions of Solr.
References
Vulnerable Configurations
  • cpe:2.3:a:apache:solr:5.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:5.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:5.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:5.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:5.5.2:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:5.5.2:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:5.5.3:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:5.5.3:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:5.5.4:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:5.5.4:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:6.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:6.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:6.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:6.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:6.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:6.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:6.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:6.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:6.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:6.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:6.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:6.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:6.4.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:6.4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:6.4.1:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:6.4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:6.4.2:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:6.4.2:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:6.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:6.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:6.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:6.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:6.6.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:6.6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:6.6.1:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:6.6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:7.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:7.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:solr:7.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:apache:solr:7.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.1.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
    cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
    cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
    cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
    cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
    cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
    cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
CVSS
Base: 7.5 (as of 19-04-2022 - 16:06)
Impact:
Exploitability:
CWE CWE-611
CAPEC
  • XML External Entities Blowup
    This attack takes advantage of the entity replacement property of XML where the value of the replacement is a URI. A well-crafted XML document could have the entity refer to a URI that consumes a large amount of resources to create a denial of service condition. This can cause the system to either freeze, crash, or execute arbitrary code depending on the URI.
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
redhat via4
advisories
  • rhsa
    id RHSA-2017:3123
  • rhsa
    id RHSA-2017:3124
  • rhsa
    id RHSA-2017:3244
  • rhsa
    id RHSA-2017:3451
  • rhsa
    id RHSA-2017:3452
  • rhsa
    id RHSA-2018:0002
  • rhsa
    id RHSA-2018:0003
  • rhsa
    id RHSA-2018:0004
  • rhsa
    id RHSA-2018:0005
rpms
  • eap7-lucene-analyzers-common-0:5.3.1-4.redhat_2.1.ep7.el6
  • eap7-lucene-analyzers-common-0:5.3.1-4.redhat_2.1.ep7.el7
  • eap7-lucene-backward-codecs-0:5.3.1-4.redhat_2.1.ep7.el6
  • eap7-lucene-backward-codecs-0:5.3.1-4.redhat_2.1.ep7.el7
  • eap7-lucene-core-0:5.3.1-4.redhat_2.1.ep7.el6
  • eap7-lucene-core-0:5.3.1-4.redhat_2.1.ep7.el7
  • eap7-lucene-facet-0:5.3.1-4.redhat_2.1.ep7.el6
  • eap7-lucene-facet-0:5.3.1-4.redhat_2.1.ep7.el7
  • eap7-lucene-misc-0:5.3.1-4.redhat_2.1.ep7.el6
  • eap7-lucene-misc-0:5.3.1-4.redhat_2.1.ep7.el7
  • eap7-lucene-queries-0:5.3.1-4.redhat_2.1.ep7.el6
  • eap7-lucene-queries-0:5.3.1-4.redhat_2.1.ep7.el7
  • eap7-lucene-queryparser-0:5.3.1-4.redhat_2.1.ep7.el6
  • eap7-lucene-queryparser-0:5.3.1-4.redhat_2.1.ep7.el7
  • eap7-lucene-solr-0:5.3.1-4.redhat_2.1.ep7.el6
  • eap7-lucene-solr-0:5.3.1-4.redhat_2.1.ep7.el7
  • rh-java-common-lucene-0:4.8.0-6.9.el6
  • rh-java-common-lucene-0:4.8.0-6.9.el7
  • rh-java-common-lucene-analysis-0:4.8.0-6.9.el6
  • rh-java-common-lucene-analysis-0:4.8.0-6.9.el7
  • rh-java-common-lucene-analyzers-phonetic-0:4.8.0-6.9.el6
  • rh-java-common-lucene-analyzers-phonetic-0:4.8.0-6.9.el7
  • rh-java-common-lucene-analyzers-smartcn-0:4.8.0-6.9.el6
  • rh-java-common-lucene-analyzers-smartcn-0:4.8.0-6.9.el7
  • rh-java-common-lucene-analyzers-stempel-0:4.8.0-6.9.el6
  • rh-java-common-lucene-analyzers-stempel-0:4.8.0-6.9.el7
  • rh-java-common-lucene-classification-0:4.8.0-6.9.el6
  • rh-java-common-lucene-classification-0:4.8.0-6.9.el7
  • rh-java-common-lucene-codecs-0:4.8.0-6.9.el6
  • rh-java-common-lucene-codecs-0:4.8.0-6.9.el7
  • rh-java-common-lucene-facet-0:4.8.0-6.9.el6
  • rh-java-common-lucene-facet-0:4.8.0-6.9.el7
  • rh-java-common-lucene-grouping-0:4.8.0-6.9.el6
  • rh-java-common-lucene-grouping-0:4.8.0-6.9.el7
  • rh-java-common-lucene-highlighter-0:4.8.0-6.9.el6
  • rh-java-common-lucene-highlighter-0:4.8.0-6.9.el7
  • rh-java-common-lucene-javadoc-0:4.8.0-6.9.el6
  • rh-java-common-lucene-javadoc-0:4.8.0-6.9.el7
  • rh-java-common-lucene-join-0:4.8.0-6.9.el6
  • rh-java-common-lucene-join-0:4.8.0-6.9.el7
  • rh-java-common-lucene-memory-0:4.8.0-6.9.el6
  • rh-java-common-lucene-memory-0:4.8.0-6.9.el7
  • rh-java-common-lucene-misc-0:4.8.0-6.9.el6
  • rh-java-common-lucene-misc-0:4.8.0-6.9.el7
  • rh-java-common-lucene-parent-0:4.8.0-6.9.el6
  • rh-java-common-lucene-parent-0:4.8.0-6.9.el7
  • rh-java-common-lucene-queries-0:4.8.0-6.9.el6
  • rh-java-common-lucene-queries-0:4.8.0-6.9.el7
  • rh-java-common-lucene-queryparser-0:4.8.0-6.9.el6
  • rh-java-common-lucene-queryparser-0:4.8.0-6.9.el7
  • rh-java-common-lucene-replicator-0:4.8.0-6.9.el6
  • rh-java-common-lucene-replicator-0:4.8.0-6.9.el7
  • rh-java-common-lucene-sandbox-0:4.8.0-6.9.el6
  • rh-java-common-lucene-sandbox-0:4.8.0-6.9.el7
  • rh-java-common-lucene-solr-grandparent-0:4.8.0-6.9.el6
  • rh-java-common-lucene-solr-grandparent-0:4.8.0-6.9.el7
  • rh-java-common-lucene-suggest-0:4.8.0-6.9.el6
  • rh-java-common-lucene-suggest-0:4.8.0-6.9.el7
  • rh-java-common-lucene5-0:5.4.1-2.4.el6
  • rh-java-common-lucene5-0:5.4.1-2.4.el7
  • rh-java-common-lucene5-analysis-0:5.4.1-2.4.el6
  • rh-java-common-lucene5-analysis-0:5.4.1-2.4.el7
  • rh-java-common-lucene5-analyzers-smartcn-0:5.4.1-2.4.el6
  • rh-java-common-lucene5-analyzers-smartcn-0:5.4.1-2.4.el7
  • rh-java-common-lucene5-backward-codecs-0:5.4.1-2.4.el6
  • rh-java-common-lucene5-backward-codecs-0:5.4.1-2.4.el7
  • rh-java-common-lucene5-classification-0:5.4.1-2.4.el6
  • rh-java-common-lucene5-classification-0:5.4.1-2.4.el7
  • rh-java-common-lucene5-codecs-0:5.4.1-2.4.el6
  • rh-java-common-lucene5-codecs-0:5.4.1-2.4.el7
  • rh-java-common-lucene5-facet-0:5.4.1-2.4.el6
  • rh-java-common-lucene5-facet-0:5.4.1-2.4.el7
  • rh-java-common-lucene5-grouping-0:5.4.1-2.4.el6
  • rh-java-common-lucene5-grouping-0:5.4.1-2.4.el7
  • rh-java-common-lucene5-highlighter-0:5.4.1-2.4.el6
  • rh-java-common-lucene5-highlighter-0:5.4.1-2.4.el7
  • rh-java-common-lucene5-javadoc-0:5.4.1-2.4.el6
  • rh-java-common-lucene5-javadoc-0:5.4.1-2.4.el7
  • rh-java-common-lucene5-join-0:5.4.1-2.4.el6
  • rh-java-common-lucene5-join-0:5.4.1-2.4.el7
  • rh-java-common-lucene5-memory-0:5.4.1-2.4.el6
  • rh-java-common-lucene5-memory-0:5.4.1-2.4.el7
  • rh-java-common-lucene5-misc-0:5.4.1-2.4.el6
  • rh-java-common-lucene5-misc-0:5.4.1-2.4.el7
  • rh-java-common-lucene5-parent-0:5.4.1-2.4.el6
  • rh-java-common-lucene5-parent-0:5.4.1-2.4.el7
  • rh-java-common-lucene5-queries-0:5.4.1-2.4.el6
  • rh-java-common-lucene5-queries-0:5.4.1-2.4.el7
  • rh-java-common-lucene5-queryparser-0:5.4.1-2.4.el6
  • rh-java-common-lucene5-queryparser-0:5.4.1-2.4.el7
  • rh-java-common-lucene5-replicator-0:5.4.1-2.4.el6
  • rh-java-common-lucene5-replicator-0:5.4.1-2.4.el7
  • rh-java-common-lucene5-sandbox-0:5.4.1-2.4.el6
  • rh-java-common-lucene5-sandbox-0:5.4.1-2.4.el7
  • rh-java-common-lucene5-solr-grandparent-0:5.4.1-2.4.el6
  • rh-java-common-lucene5-solr-grandparent-0:5.4.1-2.4.el7
  • rh-java-common-lucene5-suggest-0:5.4.1-2.4.el6
  • rh-java-common-lucene5-suggest-0:5.4.1-2.4.el7
  • eap7-activemq-artemis-0:1.1.0-19.SP24_redhat_1.1.ep7.el6
  • eap7-activemq-artemis-cli-0:1.1.0-19.SP24_redhat_1.1.ep7.el6
  • eap7-activemq-artemis-commons-0:1.1.0-19.SP24_redhat_1.1.ep7.el6
  • eap7-activemq-artemis-core-client-0:1.1.0-19.SP24_redhat_1.1.ep7.el6
  • eap7-activemq-artemis-dto-0:1.1.0-19.SP24_redhat_1.1.ep7.el6
  • eap7-activemq-artemis-hornetq-protocol-0:1.1.0-19.SP24_redhat_1.1.ep7.el6
  • eap7-activemq-artemis-hqclient-protocol-0:1.1.0-19.SP24_redhat_1.1.ep7.el6
  • eap7-activemq-artemis-jms-client-0:1.1.0-19.SP24_redhat_1.1.ep7.el6
  • eap7-activemq-artemis-jms-server-0:1.1.0-19.SP24_redhat_1.1.ep7.el6
  • eap7-activemq-artemis-journal-0:1.1.0-19.SP24_redhat_1.1.ep7.el6
  • eap7-activemq-artemis-native-0:1.1.0-19.SP24_redhat_1.1.ep7.el6
  • eap7-activemq-artemis-ra-0:1.1.0-19.SP24_redhat_1.1.ep7.el6
  • eap7-activemq-artemis-selector-0:1.1.0-19.SP24_redhat_1.1.ep7.el6
  • eap7-activemq-artemis-server-0:1.1.0-19.SP24_redhat_1.1.ep7.el6
  • eap7-activemq-artemis-service-extensions-0:1.1.0-19.SP24_redhat_1.1.ep7.el6
  • eap7-hibernate-0:5.0.16-1.Final_redhat_1.1.ep7.el6
  • eap7-hibernate-core-0:5.0.16-1.Final_redhat_1.1.ep7.el6
  • eap7-hibernate-entitymanager-0:5.0.16-1.Final_redhat_1.1.ep7.el6
  • eap7-hibernate-envers-0:5.0.16-1.Final_redhat_1.1.ep7.el6
  • eap7-hibernate-infinispan-0:5.0.16-1.Final_redhat_1.1.ep7.el6
  • eap7-hibernate-java8-0:5.0.16-1.Final_redhat_1.1.ep7.el6
  • eap7-ironjacamar-0:1.3.8-1.Final_redhat_1.1.ep7.el6
  • eap7-ironjacamar-common-api-0:1.3.8-1.Final_redhat_1.1.ep7.el6
  • eap7-ironjacamar-common-impl-0:1.3.8-1.Final_redhat_1.1.ep7.el6
  • eap7-ironjacamar-common-spi-0:1.3.8-1.Final_redhat_1.1.ep7.el6
  • eap7-ironjacamar-core-api-0:1.3.8-1.Final_redhat_1.1.ep7.el6
  • eap7-ironjacamar-core-impl-0:1.3.8-1.Final_redhat_1.1.ep7.el6
  • eap7-ironjacamar-deployers-common-0:1.3.8-1.Final_redhat_1.1.ep7.el6
  • eap7-ironjacamar-jdbc-0:1.3.8-1.Final_redhat_1.1.ep7.el6
  • eap7-ironjacamar-validator-0:1.3.8-1.Final_redhat_1.1.ep7.el6
  • eap7-jboss-remoting-0:4.0.25-1.Final_redhat_1.1.ep7.el6
  • eap7-jboss-xnio-base-0:3.4.7-1.Final_redhat_1.1.ep7.el6
  • eap7-jgroups-0:3.6.12-1.Final_redhat_1.1.ep7.el6
  • eap7-resteasy-0:3.0.19-7.SP5_redhat_1.1.ep7.el6
  • eap7-resteasy-async-http-servlet-3.0-0:3.0.19-7.SP5_redhat_1.1.ep7.el6
  • eap7-resteasy-atom-provider-0:3.0.19-7.SP5_redhat_1.1.ep7.el6
  • eap7-resteasy-cdi-0:3.0.19-7.SP5_redhat_1.1.ep7.el6
  • eap7-resteasy-client-0:3.0.19-7.SP5_redhat_1.1.ep7.el6
  • eap7-resteasy-crypto-0:3.0.19-7.SP5_redhat_1.1.ep7.el6
  • eap7-resteasy-jackson-provider-0:3.0.19-7.SP5_redhat_1.1.ep7.el6
  • eap7-resteasy-jackson2-provider-0:3.0.19-7.SP5_redhat_1.1.ep7.el6
  • eap7-resteasy-jaxb-provider-0:3.0.19-7.SP5_redhat_1.1.ep7.el6
  • eap7-resteasy-jaxrs-0:3.0.19-7.SP5_redhat_1.1.ep7.el6
  • eap7-resteasy-jettison-provider-0:3.0.19-7.SP5_redhat_1.1.ep7.el6
  • eap7-resteasy-jose-jwt-0:3.0.19-7.SP5_redhat_1.1.ep7.el6
  • eap7-resteasy-jsapi-0:3.0.19-7.SP5_redhat_1.1.ep7.el6
  • eap7-resteasy-json-p-provider-0:3.0.19-7.SP5_redhat_1.1.ep7.el6
  • eap7-resteasy-multipart-provider-0:3.0.19-7.SP5_redhat_1.1.ep7.el6
  • eap7-resteasy-spring-0:3.0.19-7.SP5_redhat_1.1.ep7.el6
  • eap7-resteasy-validator-provider-11-0:3.0.19-7.SP5_redhat_1.1.ep7.el6
  • eap7-resteasy-yaml-provider-0:3.0.19-7.SP5_redhat_1.1.ep7.el6
  • eap7-undertow-0:1.3.31-3.Final_redhat_3.1.ep7.el6
  • eap7-wildfly-0:7.0.9-4.GA_redhat_3.1.ep7.el6
  • eap7-wildfly-javadocs-0:7.0.9-2.GA_redhat_3.1.ep7.el6
  • eap7-wildfly-modules-0:7.0.9-4.GA_redhat_3.1.ep7.el6
  • eap7-activemq-artemis-0:1.1.0-19.SP24_redhat_1.1.ep7.el7
  • eap7-activemq-artemis-cli-0:1.1.0-19.SP24_redhat_1.1.ep7.el7
  • eap7-activemq-artemis-commons-0:1.1.0-19.SP24_redhat_1.1.ep7.el7
  • eap7-activemq-artemis-core-client-0:1.1.0-19.SP24_redhat_1.1.ep7.el7
  • eap7-activemq-artemis-dto-0:1.1.0-19.SP24_redhat_1.1.ep7.el7
  • eap7-activemq-artemis-hornetq-protocol-0:1.1.0-19.SP24_redhat_1.1.ep7.el7
  • eap7-activemq-artemis-hqclient-protocol-0:1.1.0-19.SP24_redhat_1.1.ep7.el7
  • eap7-activemq-artemis-jms-client-0:1.1.0-19.SP24_redhat_1.1.ep7.el7
  • eap7-activemq-artemis-jms-server-0:1.1.0-19.SP24_redhat_1.1.ep7.el7
  • eap7-activemq-artemis-journal-0:1.1.0-19.SP24_redhat_1.1.ep7.el7
  • eap7-activemq-artemis-native-0:1.1.0-19.SP24_redhat_1.1.ep7.el7
  • eap7-activemq-artemis-ra-0:1.1.0-19.SP24_redhat_1.1.ep7.el7
  • eap7-activemq-artemis-selector-0:1.1.0-19.SP24_redhat_1.1.ep7.el7
  • eap7-activemq-artemis-server-0:1.1.0-19.SP24_redhat_1.1.ep7.el7
  • eap7-activemq-artemis-service-extensions-0:1.1.0-19.SP24_redhat_1.1.ep7.el7
  • eap7-hibernate-0:5.0.16-1.Final_redhat_1.1.ep7.el7
  • eap7-hibernate-core-0:5.0.16-1.Final_redhat_1.1.ep7.el7
  • eap7-hibernate-entitymanager-0:5.0.16-1.Final_redhat_1.1.ep7.el7
  • eap7-hibernate-envers-0:5.0.16-1.Final_redhat_1.1.ep7.el7
  • eap7-hibernate-infinispan-0:5.0.16-1.Final_redhat_1.1.ep7.el7
  • eap7-hibernate-java8-0:5.0.16-1.Final_redhat_1.1.ep7.el7
  • eap7-ironjacamar-0:1.3.8-1.Final_redhat_1.1.ep7.el7
  • eap7-ironjacamar-common-api-0:1.3.8-1.Final_redhat_1.1.ep7.el7
  • eap7-ironjacamar-common-impl-0:1.3.8-1.Final_redhat_1.1.ep7.el7
  • eap7-ironjacamar-common-spi-0:1.3.8-1.Final_redhat_1.1.ep7.el7
  • eap7-ironjacamar-core-api-0:1.3.8-1.Final_redhat_1.1.ep7.el7
  • eap7-ironjacamar-core-impl-0:1.3.8-1.Final_redhat_1.1.ep7.el7
  • eap7-ironjacamar-deployers-common-0:1.3.8-1.Final_redhat_1.1.ep7.el7
  • eap7-ironjacamar-jdbc-0:1.3.8-1.Final_redhat_1.1.ep7.el7
  • eap7-ironjacamar-validator-0:1.3.8-1.Final_redhat_1.1.ep7.el7
  • eap7-jboss-remoting-0:4.0.25-1.Final_redhat_1.1.ep7.el7
  • eap7-jboss-xnio-base-0:3.4.7-1.Final_redhat_1.1.ep7.el7
  • eap7-jgroups-0:3.6.12-1.Final_redhat_1.1.ep7.el7
  • eap7-resteasy-0:3.0.19-7.SP5_redhat_1.1.ep7.el7
  • eap7-resteasy-async-http-servlet-3.0-0:3.0.19-7.SP5_redhat_1.1.ep7.el7
  • eap7-resteasy-atom-provider-0:3.0.19-7.SP5_redhat_1.1.ep7.el7
  • eap7-resteasy-cdi-0:3.0.19-7.SP5_redhat_1.1.ep7.el7
  • eap7-resteasy-client-0:3.0.19-7.SP5_redhat_1.1.ep7.el7
  • eap7-resteasy-crypto-0:3.0.19-7.SP5_redhat_1.1.ep7.el7
  • eap7-resteasy-jackson-provider-0:3.0.19-7.SP5_redhat_1.1.ep7.el7
  • eap7-resteasy-jackson2-provider-0:3.0.19-7.SP5_redhat_1.1.ep7.el7
  • eap7-resteasy-jaxb-provider-0:3.0.19-7.SP5_redhat_1.1.ep7.el7
  • eap7-resteasy-jaxrs-0:3.0.19-7.SP5_redhat_1.1.ep7.el7
  • eap7-resteasy-jettison-provider-0:3.0.19-7.SP5_redhat_1.1.ep7.el7
  • eap7-resteasy-jose-jwt-0:3.0.19-7.SP5_redhat_1.1.ep7.el7
  • eap7-resteasy-jsapi-0:3.0.19-7.SP5_redhat_1.1.ep7.el7
  • eap7-resteasy-json-p-provider-0:3.0.19-7.SP5_redhat_1.1.ep7.el7
  • eap7-resteasy-multipart-provider-0:3.0.19-7.SP5_redhat_1.1.ep7.el7
  • eap7-resteasy-spring-0:3.0.19-7.SP5_redhat_1.1.ep7.el7
  • eap7-resteasy-validator-provider-11-0:3.0.19-7.SP5_redhat_1.1.ep7.el7
  • eap7-resteasy-yaml-provider-0:3.0.19-7.SP5_redhat_1.1.ep7.el7
  • eap7-undertow-0:1.3.31-3.Final_redhat_3.1.ep7.el7
  • eap7-wildfly-0:7.0.9-4.GA_redhat_3.1.ep7.el7
  • eap7-wildfly-javadocs-0:7.0.9-2.GA_redhat_3.1.ep7.el7
  • eap7-wildfly-modules-0:7.0.9-4.GA_redhat_3.1.ep7.el7
  • eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el6
  • eap7-jboss-ec2-eap-0:7.0.9-2.GA_redhat_2.ep7.el7
  • eap7-jboss-ec2-eap-samples-0:7.0.9-2.GA_redhat_2.ep7.el6
  • eap7-jboss-ec2-eap-samples-0:7.0.9-2.GA_redhat_2.ep7.el7
refmap via4
bid 101261
debian DSA-4124
exploit-db 43009
misc
mlist
  • [debian-lts-announce] 20180121 [SECURITY] [DLA 1254-1] lucene-solr security update
  • [lucene-dev] 20171012 Re: Several critical vulnerabilities discovered in Apache Solr (XXE & RCE)
  • [www-announce] 20171019 [SECURITY] CVE-2017-12629: Several critical vulnerabilities discovered in Apache Solr (XXE & RCE)
ubuntu USN-4259-1
Last major update 19-04-2022 - 16:06
Published 14-10-2017 - 23:29
Last modified 19-04-2022 - 16:06
Back to Top