Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/5037?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/5037?format=api", "vulnerability_id": "VCID-rym5-bjyc-nybu", "summary": "The DocumentAnalysisRequestHandler in Apache Solr before 4.3.1 does not properly use the EmptyEntityResolver, which allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6407.", "aliases": [ { "alias": "CVE-2013-6408" }, { "alias": "GHSA-45w3-2hvv-pfxq" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/930189?format=api", "purl": "pkg:deb/debian/lucene-solr@3.6.2%2Bdfsg-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/lucene-solr@3.6.2%252Bdfsg-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1036055?format=api", "purl": "pkg:deb/debian/lucene-solr@3.6.2%2Bdfsg-5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4dgs-1mk2-5ubr" }, { "vulnerability": "VCID-ftx3-494m-hbee" }, { "vulnerability": "VCID-h9gm-dpgv-2yeh" }, { "vulnerability": "VCID-hpys-9ncu-3bgv" }, { "vulnerability": "VCID-jc41-ky5q-tkhv" }, { "vulnerability": "VCID-ke61-vddr-4udk" }, { "vulnerability": "VCID-qkt3-eevh-ekcr" }, { "vulnerability": "VCID-rys3-pnnk-a7e4" }, { "vulnerability": "VCID-t4p6-84y8-kbbu" }, { "vulnerability": "VCID-tt7h-4geu-5bc9" }, { "vulnerability": "VCID-v5ka-6bd4-33ft" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/lucene-solr@3.6.2%252Bdfsg-5" }, { "url": "http://public2.vulnerablecode.io/api/packages/930190?format=api", "purl": "pkg:deb/debian/lucene-solr@3.6.2%2Bdfsg-24?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/lucene-solr@3.6.2%252Bdfsg-24%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/930188?format=api", "purl": "pkg:deb/debian/lucene-solr@3.6.2%2Bdfsg-26?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/lucene-solr@3.6.2%252Bdfsg-26%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/930191?format=api", "purl": "pkg:deb/debian/lucene-solr@3.6.2%2Bdfsg-27?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/lucene-solr@3.6.2%252Bdfsg-27%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/82695?format=api", "purl": "pkg:maven/org.apache.solr/solr-core@4.3.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3vmh-e7x6-3kf6" }, { "vulnerability": "VCID-4dgs-1mk2-5ubr" }, { "vulnerability": "VCID-5781-s1ny-q7ey" }, { "vulnerability": "VCID-5esr-zs91-zbb5" }, { "vulnerability": "VCID-5tq3-rye7-nygg" }, { "vulnerability": "VCID-a4yf-9j54-e3cp" }, { "vulnerability": "VCID-f12j-fvhp-quec" }, { "vulnerability": "VCID-ftx3-494m-hbee" }, { "vulnerability": "VCID-h9gm-dpgv-2yeh" }, { "vulnerability": "VCID-ke61-vddr-4udk" }, { "vulnerability": "VCID-rym5-bjyc-nybu" }, { "vulnerability": "VCID-tt7h-4geu-5bc9" }, { "vulnerability": "VCID-v5ka-6bd4-33ft" }, { "vulnerability": "VCID-vvt2-qyef-3fa6" }, { "vulnerability": "VCID-wke8-9ysk-akc2" }, { "vulnerability": "VCID-xypj-xu8p-gkbs" }, { "vulnerability": "VCID-zfk3-8kt1-gbbw" }, { "vulnerability": "VCID-zrn1-s7ht-pbdt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@4.3.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/20484?format=api", "purl": "pkg:maven/org.apache.solr/solr-core@4.6.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3vmh-e7x6-3kf6" }, { "vulnerability": "VCID-4dgs-1mk2-5ubr" }, { "vulnerability": "VCID-5781-s1ny-q7ey" }, { "vulnerability": "VCID-5esr-zs91-zbb5" }, { "vulnerability": "VCID-a4yf-9j54-e3cp" }, { "vulnerability": "VCID-f12j-fvhp-quec" }, { "vulnerability": "VCID-ftx3-494m-hbee" }, { "vulnerability": "VCID-h9gm-dpgv-2yeh" }, { "vulnerability": "VCID-ke61-vddr-4udk" }, { "vulnerability": "VCID-tt7h-4geu-5bc9" }, { "vulnerability": "VCID-v5ka-6bd4-33ft" }, { "vulnerability": "VCID-vvt2-qyef-3fa6" }, { "vulnerability": "VCID-xypj-xu8p-gkbs" }, { "vulnerability": "VCID-zfk3-8kt1-gbbw" }, { "vulnerability": "VCID-zrn1-s7ht-pbdt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@4.6.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/20485?format=api", "purl": "pkg:maven/org.apache.solr/solr-core@5.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3vmh-e7x6-3kf6" }, { "vulnerability": "VCID-4dgs-1mk2-5ubr" }, { "vulnerability": "VCID-5781-s1ny-q7ey" }, { "vulnerability": "VCID-5esr-zs91-zbb5" }, { "vulnerability": "VCID-a4yf-9j54-e3cp" }, { "vulnerability": "VCID-f12j-fvhp-quec" }, { "vulnerability": "VCID-ftx3-494m-hbee" }, { "vulnerability": "VCID-h9gm-dpgv-2yeh" }, { "vulnerability": "VCID-jugm-3s3r-8kf8" }, { "vulnerability": "VCID-ke61-vddr-4udk" }, { "vulnerability": "VCID-tt7h-4geu-5bc9" }, { "vulnerability": "VCID-v5ka-6bd4-33ft" }, { "vulnerability": "VCID-vvt2-qyef-3fa6" }, { "vulnerability": "VCID-xypj-xu8p-gkbs" }, { "vulnerability": "VCID-z2u5-9szx-vyax" }, { "vulnerability": "VCID-zrn1-s7ht-pbdt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@5.0.0" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/1036054?format=api", "purl": "pkg:deb/debian/lucene-solr@3.6.0%2Bdfsg-1%2Bdeb7u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3f1v-ypty-mygx" }, { "vulnerability": "VCID-4dgs-1mk2-5ubr" }, { "vulnerability": "VCID-5tq3-rye7-nygg" }, { "vulnerability": "VCID-ftx3-494m-hbee" }, { "vulnerability": "VCID-h9gm-dpgv-2yeh" }, { "vulnerability": "VCID-hpys-9ncu-3bgv" }, { "vulnerability": "VCID-jc41-ky5q-tkhv" }, { "vulnerability": "VCID-ke61-vddr-4udk" }, { "vulnerability": "VCID-qkt3-eevh-ekcr" }, { "vulnerability": "VCID-rym5-bjyc-nybu" }, { "vulnerability": "VCID-rys3-pnnk-a7e4" }, { "vulnerability": "VCID-t4p6-84y8-kbbu" }, { "vulnerability": "VCID-tt7h-4geu-5bc9" }, { "vulnerability": "VCID-v5ka-6bd4-33ft" }, { "vulnerability": "VCID-wke8-9ysk-akc2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/lucene-solr@3.6.0%252Bdfsg-1%252Bdeb7u1" }, { "url": "http://public2.vulnerablecode.io/api/packages/35325?format=api", "purl": "pkg:maven/org.apache.solr/solr-core@1.3.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3f1v-ypty-mygx" }, { "vulnerability": "VCID-3vmh-e7x6-3kf6" }, { "vulnerability": "VCID-4dgs-1mk2-5ubr" }, { "vulnerability": "VCID-5781-s1ny-q7ey" }, { "vulnerability": "VCID-5esr-zs91-zbb5" }, { "vulnerability": "VCID-5tq3-rye7-nygg" }, { "vulnerability": "VCID-a4yf-9j54-e3cp" }, { "vulnerability": "VCID-f12j-fvhp-quec" }, { "vulnerability": "VCID-ftx3-494m-hbee" }, { "vulnerability": "VCID-h9gm-dpgv-2yeh" }, { "vulnerability": "VCID-ke61-vddr-4udk" }, { "vulnerability": "VCID-rym5-bjyc-nybu" }, { "vulnerability": "VCID-tt7h-4geu-5bc9" }, { "vulnerability": "VCID-v5ka-6bd4-33ft" }, { "vulnerability": "VCID-vvt2-qyef-3fa6" }, { "vulnerability": "VCID-wke8-9ysk-akc2" }, { "vulnerability": "VCID-xypj-xu8p-gkbs" }, { "vulnerability": "VCID-zfk3-8kt1-gbbw" }, { "vulnerability": "VCID-zrn1-s7ht-pbdt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@1.3.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/149193?format=api", "purl": "pkg:maven/org.apache.solr/solr-core@1.4.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3f1v-ypty-mygx" }, { "vulnerability": "VCID-3vmh-e7x6-3kf6" }, { "vulnerability": "VCID-4dgs-1mk2-5ubr" }, { "vulnerability": "VCID-5781-s1ny-q7ey" }, { "vulnerability": "VCID-5esr-zs91-zbb5" }, { "vulnerability": "VCID-5tq3-rye7-nygg" }, { "vulnerability": "VCID-a4yf-9j54-e3cp" }, { "vulnerability": "VCID-f12j-fvhp-quec" }, { "vulnerability": "VCID-ftx3-494m-hbee" }, { "vulnerability": "VCID-h9gm-dpgv-2yeh" }, { "vulnerability": "VCID-ke61-vddr-4udk" }, { "vulnerability": "VCID-rym5-bjyc-nybu" }, { "vulnerability": "VCID-tt7h-4geu-5bc9" }, { "vulnerability": "VCID-v5ka-6bd4-33ft" }, { "vulnerability": "VCID-vvt2-qyef-3fa6" }, { "vulnerability": "VCID-wke8-9ysk-akc2" }, { "vulnerability": "VCID-xypj-xu8p-gkbs" }, { "vulnerability": "VCID-zfk3-8kt1-gbbw" }, { "vulnerability": "VCID-zrn1-s7ht-pbdt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@1.4.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/149194?format=api", "purl": "pkg:maven/org.apache.solr/solr-core@1.4.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3f1v-ypty-mygx" }, { "vulnerability": "VCID-3vmh-e7x6-3kf6" }, { "vulnerability": "VCID-4dgs-1mk2-5ubr" }, { "vulnerability": "VCID-5781-s1ny-q7ey" }, { "vulnerability": "VCID-5esr-zs91-zbb5" }, { "vulnerability": "VCID-5tq3-rye7-nygg" }, { "vulnerability": "VCID-a4yf-9j54-e3cp" }, { "vulnerability": "VCID-f12j-fvhp-quec" }, { "vulnerability": "VCID-ftx3-494m-hbee" }, { "vulnerability": "VCID-h9gm-dpgv-2yeh" }, { "vulnerability": "VCID-ke61-vddr-4udk" }, { "vulnerability": "VCID-rym5-bjyc-nybu" }, { "vulnerability": "VCID-tt7h-4geu-5bc9" }, { "vulnerability": "VCID-v5ka-6bd4-33ft" }, { "vulnerability": "VCID-vvt2-qyef-3fa6" }, { "vulnerability": "VCID-wke8-9ysk-akc2" }, { "vulnerability": "VCID-xypj-xu8p-gkbs" }, { "vulnerability": "VCID-zfk3-8kt1-gbbw" }, { "vulnerability": "VCID-zrn1-s7ht-pbdt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@1.4.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/149195?format=api", "purl": "pkg:maven/org.apache.solr/solr-core@3.1.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3f1v-ypty-mygx" }, { "vulnerability": "VCID-3vmh-e7x6-3kf6" }, { "vulnerability": "VCID-4dgs-1mk2-5ubr" }, { "vulnerability": "VCID-5781-s1ny-q7ey" }, { "vulnerability": "VCID-5esr-zs91-zbb5" }, { "vulnerability": "VCID-5tq3-rye7-nygg" }, { "vulnerability": "VCID-a4yf-9j54-e3cp" }, { "vulnerability": "VCID-f12j-fvhp-quec" }, { "vulnerability": "VCID-ftx3-494m-hbee" }, { "vulnerability": "VCID-h9gm-dpgv-2yeh" }, { "vulnerability": "VCID-ke61-vddr-4udk" }, { "vulnerability": "VCID-rym5-bjyc-nybu" }, { "vulnerability": "VCID-tt7h-4geu-5bc9" }, { "vulnerability": "VCID-v5ka-6bd4-33ft" }, { "vulnerability": "VCID-vvt2-qyef-3fa6" }, { "vulnerability": "VCID-wke8-9ysk-akc2" }, { "vulnerability": "VCID-xypj-xu8p-gkbs" }, { "vulnerability": "VCID-zfk3-8kt1-gbbw" }, { "vulnerability": "VCID-zrn1-s7ht-pbdt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@3.1.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/149196?format=api", "purl": "pkg:maven/org.apache.solr/solr-core@3.2.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3f1v-ypty-mygx" }, { "vulnerability": "VCID-3vmh-e7x6-3kf6" }, { "vulnerability": "VCID-4dgs-1mk2-5ubr" }, { "vulnerability": "VCID-5781-s1ny-q7ey" }, { "vulnerability": "VCID-5esr-zs91-zbb5" }, { "vulnerability": "VCID-5tq3-rye7-nygg" }, { "vulnerability": "VCID-a4yf-9j54-e3cp" }, { "vulnerability": "VCID-f12j-fvhp-quec" }, { "vulnerability": "VCID-ftx3-494m-hbee" }, { "vulnerability": "VCID-h9gm-dpgv-2yeh" }, { "vulnerability": "VCID-ke61-vddr-4udk" }, { "vulnerability": "VCID-rym5-bjyc-nybu" }, { "vulnerability": "VCID-tt7h-4geu-5bc9" }, { "vulnerability": "VCID-v5ka-6bd4-33ft" }, { "vulnerability": "VCID-vvt2-qyef-3fa6" }, { "vulnerability": "VCID-wke8-9ysk-akc2" }, { "vulnerability": "VCID-xypj-xu8p-gkbs" }, { "vulnerability": "VCID-zfk3-8kt1-gbbw" }, { "vulnerability": "VCID-zrn1-s7ht-pbdt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@3.2.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/149197?format=api", "purl": "pkg:maven/org.apache.solr/solr-core@3.3.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3f1v-ypty-mygx" }, { "vulnerability": "VCID-3vmh-e7x6-3kf6" }, { "vulnerability": "VCID-4dgs-1mk2-5ubr" }, { "vulnerability": "VCID-5781-s1ny-q7ey" }, { "vulnerability": "VCID-5esr-zs91-zbb5" }, { "vulnerability": "VCID-5tq3-rye7-nygg" }, { "vulnerability": "VCID-a4yf-9j54-e3cp" }, { "vulnerability": "VCID-f12j-fvhp-quec" }, { "vulnerability": "VCID-ftx3-494m-hbee" }, { "vulnerability": "VCID-h9gm-dpgv-2yeh" }, { "vulnerability": "VCID-ke61-vddr-4udk" }, { "vulnerability": "VCID-rym5-bjyc-nybu" }, { "vulnerability": "VCID-tt7h-4geu-5bc9" }, { "vulnerability": "VCID-v5ka-6bd4-33ft" }, { "vulnerability": "VCID-vvt2-qyef-3fa6" }, { "vulnerability": "VCID-wke8-9ysk-akc2" }, { "vulnerability": "VCID-xypj-xu8p-gkbs" }, { "vulnerability": "VCID-zfk3-8kt1-gbbw" }, { "vulnerability": "VCID-zrn1-s7ht-pbdt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@3.3.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/149198?format=api", "purl": "pkg:maven/org.apache.solr/solr-core@3.4.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3f1v-ypty-mygx" }, { "vulnerability": "VCID-3vmh-e7x6-3kf6" }, { "vulnerability": "VCID-4dgs-1mk2-5ubr" }, { "vulnerability": "VCID-5781-s1ny-q7ey" }, { "vulnerability": "VCID-5esr-zs91-zbb5" }, { "vulnerability": "VCID-5tq3-rye7-nygg" }, { "vulnerability": "VCID-a4yf-9j54-e3cp" }, { "vulnerability": "VCID-f12j-fvhp-quec" }, { "vulnerability": "VCID-ftx3-494m-hbee" }, { "vulnerability": "VCID-h9gm-dpgv-2yeh" }, { "vulnerability": "VCID-ke61-vddr-4udk" }, { "vulnerability": "VCID-rym5-bjyc-nybu" }, { "vulnerability": "VCID-tt7h-4geu-5bc9" }, { "vulnerability": "VCID-v5ka-6bd4-33ft" }, { "vulnerability": "VCID-vvt2-qyef-3fa6" }, { "vulnerability": "VCID-wke8-9ysk-akc2" }, { "vulnerability": "VCID-xypj-xu8p-gkbs" }, { "vulnerability": "VCID-zfk3-8kt1-gbbw" }, { "vulnerability": "VCID-zrn1-s7ht-pbdt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@3.4.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/149199?format=api", "purl": "pkg:maven/org.apache.solr/solr-core@3.5.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3f1v-ypty-mygx" }, { "vulnerability": "VCID-3vmh-e7x6-3kf6" }, { "vulnerability": "VCID-4dgs-1mk2-5ubr" }, { "vulnerability": "VCID-5781-s1ny-q7ey" }, { "vulnerability": "VCID-5esr-zs91-zbb5" }, { "vulnerability": "VCID-5tq3-rye7-nygg" }, { "vulnerability": "VCID-a4yf-9j54-e3cp" }, { "vulnerability": "VCID-f12j-fvhp-quec" }, { "vulnerability": "VCID-ftx3-494m-hbee" }, { "vulnerability": "VCID-h9gm-dpgv-2yeh" }, { "vulnerability": "VCID-ke61-vddr-4udk" }, { "vulnerability": "VCID-rym5-bjyc-nybu" }, { "vulnerability": "VCID-tt7h-4geu-5bc9" }, { "vulnerability": "VCID-v5ka-6bd4-33ft" }, { "vulnerability": "VCID-vvt2-qyef-3fa6" }, { "vulnerability": "VCID-wke8-9ysk-akc2" }, { "vulnerability": "VCID-xypj-xu8p-gkbs" }, { "vulnerability": "VCID-zfk3-8kt1-gbbw" }, { "vulnerability": "VCID-zrn1-s7ht-pbdt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@3.5.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/149200?format=api", "purl": "pkg:maven/org.apache.solr/solr-core@3.6.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3f1v-ypty-mygx" }, { "vulnerability": "VCID-3vmh-e7x6-3kf6" }, { "vulnerability": "VCID-4dgs-1mk2-5ubr" }, { "vulnerability": "VCID-5781-s1ny-q7ey" }, { "vulnerability": "VCID-5esr-zs91-zbb5" }, { "vulnerability": "VCID-5tq3-rye7-nygg" }, { "vulnerability": "VCID-a4yf-9j54-e3cp" }, { "vulnerability": "VCID-f12j-fvhp-quec" }, { "vulnerability": "VCID-ftx3-494m-hbee" }, { "vulnerability": "VCID-h9gm-dpgv-2yeh" }, { "vulnerability": "VCID-ke61-vddr-4udk" }, { "vulnerability": "VCID-rym5-bjyc-nybu" }, { "vulnerability": "VCID-tt7h-4geu-5bc9" }, { "vulnerability": "VCID-v5ka-6bd4-33ft" }, { "vulnerability": "VCID-vvt2-qyef-3fa6" }, { "vulnerability": "VCID-wke8-9ysk-akc2" }, { "vulnerability": "VCID-xypj-xu8p-gkbs" }, { "vulnerability": "VCID-zfk3-8kt1-gbbw" }, { "vulnerability": "VCID-zrn1-s7ht-pbdt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@3.6.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/149201?format=api", "purl": "pkg:maven/org.apache.solr/solr-core@3.6.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3f1v-ypty-mygx" }, { "vulnerability": "VCID-3vmh-e7x6-3kf6" }, { "vulnerability": "VCID-4dgs-1mk2-5ubr" }, { "vulnerability": "VCID-5781-s1ny-q7ey" }, { "vulnerability": "VCID-5esr-zs91-zbb5" }, { "vulnerability": "VCID-5tq3-rye7-nygg" }, { "vulnerability": "VCID-a4yf-9j54-e3cp" }, { "vulnerability": "VCID-f12j-fvhp-quec" }, { "vulnerability": "VCID-ftx3-494m-hbee" }, { "vulnerability": "VCID-h9gm-dpgv-2yeh" }, { "vulnerability": "VCID-ke61-vddr-4udk" }, { "vulnerability": "VCID-rym5-bjyc-nybu" }, { "vulnerability": "VCID-tt7h-4geu-5bc9" }, { "vulnerability": "VCID-v5ka-6bd4-33ft" }, { "vulnerability": "VCID-vvt2-qyef-3fa6" }, { "vulnerability": "VCID-wke8-9ysk-akc2" }, { "vulnerability": "VCID-xypj-xu8p-gkbs" }, { "vulnerability": "VCID-zfk3-8kt1-gbbw" }, { "vulnerability": "VCID-zrn1-s7ht-pbdt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@3.6.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/149202?format=api", "purl": "pkg:maven/org.apache.solr/solr-core@3.6.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3f1v-ypty-mygx" }, { "vulnerability": "VCID-3vmh-e7x6-3kf6" }, { "vulnerability": "VCID-4dgs-1mk2-5ubr" }, { "vulnerability": "VCID-5781-s1ny-q7ey" }, { "vulnerability": "VCID-5esr-zs91-zbb5" }, { "vulnerability": "VCID-5tq3-rye7-nygg" }, { "vulnerability": "VCID-a4yf-9j54-e3cp" }, { "vulnerability": "VCID-f12j-fvhp-quec" }, { "vulnerability": "VCID-ftx3-494m-hbee" }, { "vulnerability": "VCID-h9gm-dpgv-2yeh" }, { "vulnerability": "VCID-ke61-vddr-4udk" }, { "vulnerability": "VCID-rym5-bjyc-nybu" }, { "vulnerability": "VCID-tt7h-4geu-5bc9" }, { "vulnerability": "VCID-v5ka-6bd4-33ft" }, { "vulnerability": "VCID-vvt2-qyef-3fa6" }, { "vulnerability": "VCID-wke8-9ysk-akc2" }, { "vulnerability": "VCID-xypj-xu8p-gkbs" }, { "vulnerability": "VCID-zfk3-8kt1-gbbw" }, { "vulnerability": "VCID-zrn1-s7ht-pbdt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@3.6.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/149203?format=api", "purl": "pkg:maven/org.apache.solr/solr-core@4.0.0-ALPHA", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3f1v-ypty-mygx" }, { "vulnerability": "VCID-3vmh-e7x6-3kf6" }, { "vulnerability": "VCID-4dgs-1mk2-5ubr" }, { "vulnerability": "VCID-5781-s1ny-q7ey" }, { "vulnerability": "VCID-5esr-zs91-zbb5" }, { "vulnerability": "VCID-5tq3-rye7-nygg" }, { "vulnerability": "VCID-a4yf-9j54-e3cp" }, { "vulnerability": "VCID-f12j-fvhp-quec" }, { "vulnerability": "VCID-ftx3-494m-hbee" }, { "vulnerability": "VCID-h9gm-dpgv-2yeh" }, { "vulnerability": "VCID-ke61-vddr-4udk" }, { "vulnerability": "VCID-rym5-bjyc-nybu" }, { "vulnerability": "VCID-tt7h-4geu-5bc9" }, { "vulnerability": "VCID-v5ka-6bd4-33ft" }, { "vulnerability": "VCID-vvt2-qyef-3fa6" }, { "vulnerability": "VCID-wke8-9ysk-akc2" }, { "vulnerability": "VCID-xypj-xu8p-gkbs" }, { "vulnerability": "VCID-zrn1-s7ht-pbdt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@4.0.0-ALPHA" }, { "url": "http://public2.vulnerablecode.io/api/packages/149204?format=api", "purl": "pkg:maven/org.apache.solr/solr-core@4.0.0-BETA", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3f1v-ypty-mygx" }, { "vulnerability": "VCID-3vmh-e7x6-3kf6" }, { "vulnerability": "VCID-4dgs-1mk2-5ubr" }, { "vulnerability": "VCID-5781-s1ny-q7ey" }, { "vulnerability": "VCID-5esr-zs91-zbb5" }, { "vulnerability": "VCID-5tq3-rye7-nygg" }, { "vulnerability": "VCID-a4yf-9j54-e3cp" }, { "vulnerability": "VCID-f12j-fvhp-quec" }, { "vulnerability": "VCID-ftx3-494m-hbee" }, { "vulnerability": "VCID-h9gm-dpgv-2yeh" }, { "vulnerability": "VCID-ke61-vddr-4udk" }, { "vulnerability": "VCID-rym5-bjyc-nybu" }, { "vulnerability": "VCID-tt7h-4geu-5bc9" }, { "vulnerability": "VCID-v5ka-6bd4-33ft" }, { "vulnerability": "VCID-vvt2-qyef-3fa6" }, { "vulnerability": "VCID-wke8-9ysk-akc2" }, { "vulnerability": "VCID-xypj-xu8p-gkbs" }, { "vulnerability": "VCID-zrn1-s7ht-pbdt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@4.0.0-BETA" }, { "url": "http://public2.vulnerablecode.io/api/packages/149205?format=api", "purl": "pkg:maven/org.apache.solr/solr-core@4.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3f1v-ypty-mygx" }, { "vulnerability": "VCID-3vmh-e7x6-3kf6" }, { "vulnerability": "VCID-4dgs-1mk2-5ubr" }, { "vulnerability": "VCID-5781-s1ny-q7ey" }, { "vulnerability": "VCID-5esr-zs91-zbb5" }, { "vulnerability": "VCID-5tq3-rye7-nygg" }, { "vulnerability": "VCID-a4yf-9j54-e3cp" }, { "vulnerability": "VCID-f12j-fvhp-quec" }, { "vulnerability": "VCID-ftx3-494m-hbee" }, { "vulnerability": "VCID-h9gm-dpgv-2yeh" }, { "vulnerability": "VCID-ke61-vddr-4udk" }, { "vulnerability": "VCID-rym5-bjyc-nybu" }, { "vulnerability": "VCID-tt7h-4geu-5bc9" }, { "vulnerability": "VCID-v5ka-6bd4-33ft" }, { "vulnerability": "VCID-vvt2-qyef-3fa6" }, { "vulnerability": "VCID-wke8-9ysk-akc2" }, { "vulnerability": "VCID-xypj-xu8p-gkbs" }, { "vulnerability": "VCID-zfk3-8kt1-gbbw" }, { "vulnerability": "VCID-zrn1-s7ht-pbdt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@4.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/84111?format=api", "purl": "pkg:maven/org.apache.solr/solr-core@4.1.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3vmh-e7x6-3kf6" }, { "vulnerability": "VCID-4dgs-1mk2-5ubr" }, { "vulnerability": "VCID-5781-s1ny-q7ey" }, { "vulnerability": "VCID-5esr-zs91-zbb5" }, { "vulnerability": "VCID-5tq3-rye7-nygg" }, { "vulnerability": "VCID-a4yf-9j54-e3cp" }, { "vulnerability": "VCID-f12j-fvhp-quec" }, { "vulnerability": "VCID-ftx3-494m-hbee" }, { "vulnerability": "VCID-h9gm-dpgv-2yeh" }, { "vulnerability": "VCID-ke61-vddr-4udk" }, { "vulnerability": "VCID-rym5-bjyc-nybu" }, { "vulnerability": "VCID-tt7h-4geu-5bc9" }, { "vulnerability": "VCID-v5ka-6bd4-33ft" }, { "vulnerability": "VCID-vvt2-qyef-3fa6" }, { "vulnerability": "VCID-wke8-9ysk-akc2" }, { "vulnerability": "VCID-xypj-xu8p-gkbs" }, { "vulnerability": "VCID-zfk3-8kt1-gbbw" }, { "vulnerability": "VCID-zrn1-s7ht-pbdt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@4.1.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/149206?format=api", "purl": "pkg:maven/org.apache.solr/solr-core@4.2.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3vmh-e7x6-3kf6" }, { "vulnerability": "VCID-4dgs-1mk2-5ubr" }, { "vulnerability": "VCID-5781-s1ny-q7ey" }, { "vulnerability": "VCID-5esr-zs91-zbb5" }, { "vulnerability": "VCID-5tq3-rye7-nygg" }, { "vulnerability": "VCID-a4yf-9j54-e3cp" }, { "vulnerability": "VCID-f12j-fvhp-quec" }, { "vulnerability": "VCID-ftx3-494m-hbee" }, { "vulnerability": "VCID-h9gm-dpgv-2yeh" }, { "vulnerability": "VCID-ke61-vddr-4udk" }, { "vulnerability": "VCID-rym5-bjyc-nybu" }, { "vulnerability": "VCID-tt7h-4geu-5bc9" }, { "vulnerability": "VCID-v5ka-6bd4-33ft" }, { "vulnerability": "VCID-vvt2-qyef-3fa6" }, { "vulnerability": "VCID-wke8-9ysk-akc2" }, { "vulnerability": "VCID-xypj-xu8p-gkbs" }, { "vulnerability": "VCID-zfk3-8kt1-gbbw" }, { "vulnerability": "VCID-zrn1-s7ht-pbdt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@4.2.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/149207?format=api", "purl": "pkg:maven/org.apache.solr/solr-core@4.2.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3vmh-e7x6-3kf6" }, { "vulnerability": "VCID-4dgs-1mk2-5ubr" }, { "vulnerability": "VCID-5781-s1ny-q7ey" }, { "vulnerability": "VCID-5esr-zs91-zbb5" }, { "vulnerability": "VCID-5tq3-rye7-nygg" }, { "vulnerability": "VCID-a4yf-9j54-e3cp" }, { "vulnerability": "VCID-f12j-fvhp-quec" }, { "vulnerability": "VCID-ftx3-494m-hbee" }, { "vulnerability": "VCID-h9gm-dpgv-2yeh" }, { "vulnerability": "VCID-ke61-vddr-4udk" }, { "vulnerability": "VCID-rym5-bjyc-nybu" }, { "vulnerability": "VCID-tt7h-4geu-5bc9" }, { "vulnerability": "VCID-v5ka-6bd4-33ft" }, { "vulnerability": "VCID-vvt2-qyef-3fa6" }, { "vulnerability": "VCID-wke8-9ysk-akc2" }, { "vulnerability": "VCID-xypj-xu8p-gkbs" }, { "vulnerability": "VCID-zfk3-8kt1-gbbw" }, { "vulnerability": "VCID-zrn1-s7ht-pbdt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@4.2.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/149208?format=api", "purl": "pkg:maven/org.apache.solr/solr-core@4.3.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3vmh-e7x6-3kf6" }, { "vulnerability": "VCID-4dgs-1mk2-5ubr" }, { "vulnerability": "VCID-5781-s1ny-q7ey" }, { "vulnerability": "VCID-5esr-zs91-zbb5" }, { "vulnerability": "VCID-5tq3-rye7-nygg" }, { "vulnerability": "VCID-a4yf-9j54-e3cp" }, { "vulnerability": "VCID-f12j-fvhp-quec" }, { "vulnerability": "VCID-ftx3-494m-hbee" }, { "vulnerability": "VCID-h9gm-dpgv-2yeh" }, { "vulnerability": "VCID-ke61-vddr-4udk" }, { "vulnerability": "VCID-rym5-bjyc-nybu" }, { "vulnerability": "VCID-tt7h-4geu-5bc9" }, { "vulnerability": "VCID-v5ka-6bd4-33ft" }, { "vulnerability": "VCID-vvt2-qyef-3fa6" }, { "vulnerability": "VCID-wke8-9ysk-akc2" }, { "vulnerability": "VCID-xypj-xu8p-gkbs" }, { "vulnerability": "VCID-zfk3-8kt1-gbbw" }, { "vulnerability": "VCID-zrn1-s7ht-pbdt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@4.3.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/82695?format=api", "purl": "pkg:maven/org.apache.solr/solr-core@4.3.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3vmh-e7x6-3kf6" }, { "vulnerability": "VCID-4dgs-1mk2-5ubr" }, { "vulnerability": "VCID-5781-s1ny-q7ey" }, { "vulnerability": "VCID-5esr-zs91-zbb5" }, { "vulnerability": "VCID-5tq3-rye7-nygg" }, { "vulnerability": "VCID-a4yf-9j54-e3cp" }, { "vulnerability": "VCID-f12j-fvhp-quec" }, { "vulnerability": "VCID-ftx3-494m-hbee" }, { "vulnerability": "VCID-h9gm-dpgv-2yeh" }, { "vulnerability": "VCID-ke61-vddr-4udk" }, { "vulnerability": "VCID-rym5-bjyc-nybu" }, { "vulnerability": "VCID-tt7h-4geu-5bc9" }, { "vulnerability": "VCID-v5ka-6bd4-33ft" }, { "vulnerability": "VCID-vvt2-qyef-3fa6" }, { "vulnerability": "VCID-wke8-9ysk-akc2" }, { "vulnerability": "VCID-xypj-xu8p-gkbs" }, { "vulnerability": "VCID-zfk3-8kt1-gbbw" }, { "vulnerability": "VCID-zrn1-s7ht-pbdt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@4.3.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/149209?format=api", "purl": "pkg:maven/org.apache.solr/solr-core@4.4.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3vmh-e7x6-3kf6" }, { "vulnerability": "VCID-4dgs-1mk2-5ubr" }, { "vulnerability": "VCID-5781-s1ny-q7ey" }, { "vulnerability": "VCID-5esr-zs91-zbb5" }, { "vulnerability": "VCID-5tq3-rye7-nygg" }, { "vulnerability": "VCID-a4yf-9j54-e3cp" }, { "vulnerability": "VCID-f12j-fvhp-quec" }, { "vulnerability": "VCID-ftx3-494m-hbee" }, { "vulnerability": "VCID-h9gm-dpgv-2yeh" }, { "vulnerability": "VCID-ke61-vddr-4udk" }, { "vulnerability": "VCID-rym5-bjyc-nybu" }, { "vulnerability": "VCID-tt7h-4geu-5bc9" }, { "vulnerability": "VCID-v5ka-6bd4-33ft" }, { "vulnerability": "VCID-vvt2-qyef-3fa6" }, { "vulnerability": "VCID-wke8-9ysk-akc2" }, { "vulnerability": "VCID-xypj-xu8p-gkbs" }, { "vulnerability": "VCID-zfk3-8kt1-gbbw" }, { "vulnerability": "VCID-zrn1-s7ht-pbdt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@4.4.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/149210?format=api", "purl": "pkg:maven/org.apache.solr/solr-core@4.5.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3vmh-e7x6-3kf6" }, { "vulnerability": "VCID-4dgs-1mk2-5ubr" }, { "vulnerability": "VCID-5781-s1ny-q7ey" }, { "vulnerability": "VCID-5esr-zs91-zbb5" }, { "vulnerability": "VCID-5tq3-rye7-nygg" }, { "vulnerability": "VCID-a4yf-9j54-e3cp" }, { "vulnerability": "VCID-f12j-fvhp-quec" }, { "vulnerability": "VCID-ftx3-494m-hbee" }, { "vulnerability": "VCID-h9gm-dpgv-2yeh" }, { "vulnerability": "VCID-ke61-vddr-4udk" }, { "vulnerability": "VCID-rym5-bjyc-nybu" }, { "vulnerability": "VCID-tt7h-4geu-5bc9" }, { "vulnerability": "VCID-v5ka-6bd4-33ft" }, { "vulnerability": "VCID-vvt2-qyef-3fa6" }, { "vulnerability": "VCID-wke8-9ysk-akc2" }, { "vulnerability": "VCID-xypj-xu8p-gkbs" }, { "vulnerability": "VCID-zfk3-8kt1-gbbw" }, { "vulnerability": "VCID-zrn1-s7ht-pbdt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@4.5.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/20483?format=api", "purl": "pkg:maven/org.apache.solr/solr-core@4.5.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3vmh-e7x6-3kf6" }, { "vulnerability": "VCID-4dgs-1mk2-5ubr" }, { "vulnerability": "VCID-5781-s1ny-q7ey" }, { "vulnerability": "VCID-5esr-zs91-zbb5" }, { "vulnerability": "VCID-5tq3-rye7-nygg" }, { "vulnerability": "VCID-a4yf-9j54-e3cp" }, { "vulnerability": "VCID-f12j-fvhp-quec" }, { "vulnerability": "VCID-ftx3-494m-hbee" }, { "vulnerability": "VCID-h9gm-dpgv-2yeh" }, { "vulnerability": "VCID-ke61-vddr-4udk" }, { "vulnerability": "VCID-rym5-bjyc-nybu" }, { "vulnerability": "VCID-tt7h-4geu-5bc9" }, { "vulnerability": "VCID-v5ka-6bd4-33ft" }, { "vulnerability": "VCID-vvt2-qyef-3fa6" }, { "vulnerability": "VCID-wke8-9ysk-akc2" }, { "vulnerability": "VCID-xypj-xu8p-gkbs" }, { "vulnerability": "VCID-zfk3-8kt1-gbbw" }, { "vulnerability": "VCID-zrn1-s7ht-pbdt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.solr/solr-core@4.5.1" } ], "references": [ { "reference_url": "http://rhn.redhat.com/errata/RHSA-2013-1844.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2013-1844.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-0029.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-0029.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6408.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6408.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-6408", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.11391", "scoring_system": "epss", "scoring_elements": "0.9358", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.11391", "scoring_system": "epss", "scoring_elements": "0.93534", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.11391", "scoring_system": "epss", "scoring_elements": "0.93542", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.11391", "scoring_system": "epss", "scoring_elements": "0.93543", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.11391", "scoring_system": "epss", "scoring_elements": "0.93552", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.11391", "scoring_system": "epss", "scoring_elements": "0.93555", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.11391", "scoring_system": "epss", "scoring_elements": "0.93561", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.11391", "scoring_system": "epss", "scoring_elements": "0.9356", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.11391", "scoring_system": "epss", "scoring_elements": "0.93526", "published_at": "2026-04-01T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-6408" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6612", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6612" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6397", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6397" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6407", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6407" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6408", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6408" }, { "reference_url": "https://github.com/apache/lucene-solr", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/lucene-solr" }, { "reference_url": "https://github.com/apache/lucene-solr/commit/7239a57a51ea0f4d05dd330ce5e15e4f72f72747", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/lucene-solr/commit/7239a57a51ea0f4d05dd330ce5e15e4f72f72747" }, { "reference_url": "https://issues.apache.org/jira/browse/SOLR-4881", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://issues.apache.org/jira/browse/SOLR-4881" }, { "reference_url": "https://issues.apache.org/jira/browse/SOLR-5520", "reference_id": "", "reference_type": "", "scores": [], "url": "https://issues.apache.org/jira/browse/SOLR-5520" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-6408", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-6408" }, { "reference_url": "http://svn.apache.org/viewvc/lucene/dev/branches/branch_4x/solr/CHANGES.txt?view=markup", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://svn.apache.org/viewvc/lucene/dev/branches/branch_4x/solr/CHANGES.txt?view=markup" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2013/11/29/2", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2013/11/29/2" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1035985", "reference_id": "1035985", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1035985" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=731113", "reference_id": "731113", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=731113" }, { "reference_url": "https://bugzilla.redhat.com/CVE-2013-6408", "reference_id": "CVE-2013-6408", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/CVE-2013-6408" }, { "reference_url": "https://github.com/advisories/GHSA-45w3-2hvv-pfxq", "reference_id": "GHSA-45w3-2hvv-pfxq", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-45w3-2hvv-pfxq" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:1844", "reference_id": "RHSA-2013:1844", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:1844" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0029", "reference_id": "RHSA-2014:0029", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0029" } ], "weaknesses": [ { "cwe_id": 1035, "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017." }, { "cwe_id": 937, "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013." }, { "cwe_id": 91, "name": "XML Injection (aka Blind XPath Injection)", "description": "The product does not properly neutralize special elements that are used in XML, allowing attackers to modify the syntax, content, or commands of the XML before it is processed by an end system." } ], "exploits": [], "severity_range_score": "4.0 - 6.9", "exploitability": "0.5", "weighted_severity": "6.2", "risk_score": 3.1, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rym5-bjyc-nybu" }