ai.mattmann.mnemosyne:cas-crawler (1.11.0), ai.mattmann.mnemosyne:cas-filemgr (1.11.0) +26 more potentially affected by CVE-2015-8795 via org.apache.solr:solr-core (1.3.0)

org.apache.solr:solr-core MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - ai.mattmann.mnemosyne:cas-crawler 1.11.0 - ai.mattmann.mnemosyne:cas-filemgr 1.11.0 -...

com.chenlb.mmseg4j:mmseg4j-all (1.8.6), com.chenlb.mmseg4j:mmseg4j-all-with-dic (1.8.6) +22 more potentially affected by CVE-2015-8795 via org.apache.solr:solr-core (3.1.0)

org.apache.solr:solr-core MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - com.chenlb.mmseg4j:mmseg4j-all 1.8.6 - com.chenlb.mmseg4j:mmseg4j-all-with-dic 1.8.6 -...

com.chenlb.mmseg4j:mmseg4j-for-solr32 (1.0.0), org.apache.solr:solr (3.2.0) +23 more potentially affected by CVE-2015-8795 via org.apache.solr:solr-core (3.2.0)

org.apache.solr:solr-core MAVEN version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - com.chenlb.mmseg4j:mmseg4j-for-solr32 1.0.0 - org.apache.solr:solr 3.2.0 - org.apache.solr:solr-analysis-extr...

com.datasalt.pangool:pangool-core (>=0.40, <=0.43.3), com.datasalt.pangool:pangool-examples (>=0.40, <=0.43.3) +15 more potentially affected by CVE-2015-8795 via org.apache.solr:solr-core (3.3.0)

org.apache.solr:solr-core MAVEN version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - com.datasalt.pangool:pangool-core =0.40, =0.40, =3.0-rc2, =4.0.0.alpha1, =4.0.0.alpha1, =4.0.0.beta1 and more...

edu.cmu.lti.oaqa.core.provider:solr-provider (1.0.3), org.apache.directmemory:directmemory-solr (0.1-incubating) +20 more potentially affected by CVE-2015-8795 via org.apache.solr:solr-core (3.6.0)

org.apache.solr:solr-core MAVEN version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - edu.cmu.lti.oaqa.core.provider:solr-provider 1.0.3 - org.apache.directmemory:directmemory-solr 0.1-incubating...

com.github.jknack:mwa-solr3 (>=0.3.11, <=0.4.2), com.github.shyiko.rook:rook-target-hibernate4-fulltextindex (>=0.1.0, <=0.1.3) +39 more potentially affected by CVE-2015-8795 via org.apache.solr:solr-core (3.6.2)

org.apache.solr:solr-core MAVEN version 3.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - com.github.jknack:mwa-solr3 =0.3.11, =0.1.0, =3.2.0, =4.0.0, =2.3.2, =2.3.2, =3.2.17, =3.2.23, =1.1.9, =1.1.1...

org.apache.solr:solr (4.0.0-beta), org.apache.solr:solr-analysis-extras (4.0.0-beta) +8 more potentially affected by CVE-2015-8795 via org.apache.solr:solr-core (4.0.0-beta)

org.apache.solr:solr-core MAVEN version 4.0.0-beta is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - org.apache.solr:solr 4.0.0-beta - org.apache.solr:solr-analysis-extras 4.0.0-beta -...

com.github.jknack:mwa-solr4 (>=0.3.11, <=0.4.0), org.apache.jackrabbit:oak-solr-embedded (>=0.11, <=0.17.1) +11 more potentially affected by CVE-2015-8795 via org.apache.solr:solr-core (4.1.0)

org.apache.solr:solr-core MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - com.github.jknack:mwa-solr4 =0.3.11, =0.11, =0.11, =0.17.1 - org.apache.solr:solr 4.1.0 -...

de.eonas.portal:opencmsinstaller (>=9.0.0.1, <=9.5.2.0), de.eonas.portal:opencmsportaldriver (>=9.5.1.0, <=9.5.2.0) +22 more potentially affected by CVE-2015-8795 via org.apache.solr:solr-core (4.3.0)

org.apache.solr:solr-core MAVEN version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - de.eonas.portal:opencmsinstaller =9.0.0.1, =9.5.1.0, =9.0.1, =9.0.0, =9.0.1, =9.0.0, =9.0.1, =9.0.0, =9.0.0,...

Apache Solr Multiple Cross-Site Scripting Vulnerabilities (SOLR-7346) - Linux

Apache Solr is prone to multiple cross-site scripting vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

ai.mattmann.mnemosyne:cas-crawler (1.11.0), ai.mattmann.mnemosyne:cas-filemgr (1.11.0) +283 more potentially affected by CVE-2015-8795 via org.apache.solr:solr-core (>=1.3.0, <=4.3.0)

org.apache.solr:solr-core MAVEN version =1.3.0, =3.0.0, =3.0.0, =1.8.6, =0.40, =0.40, =0.43.3 and more Source cves: CVE-2015-8795 Source advisory: MEND:CVE-2015-8795...

CVE-2015-8795

Apache Solr CVE-2015-8795 affects the Admin UI and is described as multiple cross-site scripting (XSS) vulnerabilities in Solr versions prior to 5.1. The issues arise from improper handling of user-provided fields during rendering on the Analysis page (webapp/web/js/scripts/analysis.js) and the S...