CVE-2014-3628
06.01.2015, 15:59
Cross-site scripting (XSS) vulnerability in the Admin UI Plugin / Stats page in Apache Solr 4.x before 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the fieldvaluecache object.
| Vendor | Product | Version |
|---|---|---|
| apache | solr | 4.0.0 |
| apache | solr | 4.0.0:alpha |
| apache | solr | 4.0.0:beta |
| apache | solr | 4.1.0 |
| apache | solr | 4.2.0 |
| apache | solr | 4.2.1 |
| apache | solr | 4.3.0 |
| apache | solr | 4.3.1 |
| apache | solr | 4.4.0 |
| apache | solr | 4.5.0 |
| apache | solr | 4.5.1 |
| apache | solr | 4.6.0 |
| apache | solr | 4.6.1 |
| apache | solr | 4.7.0 |
| apache | solr | 4.7.1 |
| apache | solr | 4.7.2 |
| apache | solr | 4.8.0 |
| apache | solr | 4.8.1 |
| apache | solr | 4.9.0 |
| apache | solr | 4.9.1 |
| apache | solr | 4.10.0 |
| apache | solr | 4.10.1 |
| apache | solr | 4.10.2 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases