CVE-2019-12409

creationtimestamp| type| source ---|---|--- 2019-11-26 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=436 2023-11-17 07:13:24+00:00| seen| https://t.me/arpsyndicate/229 2023-12-08 11:43:56+00:00| seen| https://t.me/arpsyndicate/1550 2024-02-23 15:11:22+00:00| seen|...

Apache Solr 8.1.1 / 8.2.0 Remote Code Execution Vulnerability

The version of Apache Solr running on the remote web server is affected by a remote code vulnerability as referenced in the advisory. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid131167; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...

Apache Solr Bug Gets Bumped Up to High Severity

A bug impacting the Linux enterprise-search platform called Apache Solr has been revised from low to high-severity after researchers discovered a new remote code execution exploit. The warning comes from Tenable, which is reporting that the newly-identified default configuration vulnerability cou...

Exploit for Unrestricted Upload of File with Dangerous Type in Apache Solr

CVE-2019-12409 Apache Solr RCE...

CVE-2019-12409

CVE-2019-12409 affects Apache Solr 8.1.1 and 8.2.0 where the default solr.in.sh enables ENABLE_REMOTE_JMX_OPTS, exposing JMX on RMI_PORT 18983 without authentication. Unauthenticated network access to JMX can allow uploading and execution of malicious code on the Solr server. Public exploitation ...

CVE-2018-12409

The CVE-2018-12409 issue affects TIBCO Silver Fabric, specifically the SOAP Admin API component. The vulnerability is a reflected cross-site scripting (XSS) flaw in the SOAP Admin API, with affected releases up to and including 5.8.1. Reports from TIBCO’s advisory indicate the impact could enable...

TIBCO Security Advisory: February 13, 2019 - TIBCO SilverFabric

TIBCO Silver Fabric Vulnerable to Reflected Cross-Site Scripting attacks Original release date: February 13,2019 Last revised: CVE-2018-12409 Source: TIBCO Software Inc. TIBCO Silver Fabric Vulnerable to Reflected Cross-Site Scripting attacks Original release date: February 13, 2019 Last revised:...