edu.cmu.lti.oaqa.core.provider:solr-provider (1.0.3), org.apache.directmemory:directmemory-solr (0.1-incubating) +20 more potentially affected by CVE-2015-8797 via org.apache.solr:solr-core (3.6.0)

org.apache.solr:solr-core MAVEN version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - edu.cmu.lti.oaqa.core.provider:solr-provider 1.0.3 - org.apache.directmemory:directmemory-solr 0.1-incubating...

com.github.jknack:mwa-solr3 (>=0.3.11, <=0.4.2), com.github.shyiko.rook:rook-target-hibernate4-fulltextindex (>=0.1.0, <=0.1.3) +39 more potentially affected by CVE-2015-8797 via org.apache.solr:solr-core (3.6.2)

org.apache.solr:solr-core MAVEN version 3.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - com.github.jknack:mwa-solr3 =0.3.11, =0.1.0, =3.2.0, =4.0.0, =2.3.2, =2.3.2, =3.2.17, =3.2.23, =1.1.9, =1.1.1...

com.chenlb.mmseg4j:mmseg4j-all (1.8.6), com.chenlb.mmseg4j:mmseg4j-all-with-dic (1.8.6) +22 more potentially affected by CVE-2015-8797 via org.apache.solr:solr-core (3.1.0)

org.apache.solr:solr-core MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - com.chenlb.mmseg4j:mmseg4j-all 1.8.6 - com.chenlb.mmseg4j:mmseg4j-all-with-dic 1.8.6 -...

com.datasalt.pangool:pangool-core (>=0.40, <=0.43.3), com.datasalt.pangool:pangool-examples (>=0.40, <=0.43.3) +15 more potentially affected by CVE-2015-8797 via org.apache.solr:solr-core (3.3.0)

org.apache.solr:solr-core MAVEN version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - com.datasalt.pangool:pangool-core =0.40, =0.40, =3.0-rc2, =4.0.0.alpha1, =4.0.0.alpha1, =4.0.0.beta1 and more...

com.findwise.hydra:hydra-solr-in (>=0.3.1, <=0.4.5), com.google.code:lucene-gosen-ipadic (1.2.1) +20 more potentially affected by CVE-2015-8797 via org.apache.solr:solr-core (3.4.0)

org.apache.solr:solr-core MAVEN version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - com.findwise.hydra:hydra-solr-in =0.3.1, =1.9.0, =1.11.0, =4.0.0.beta2, =4.0.0.beta2, =4.0.0.final and more...

ai.mattmann.mnemosyne:cas-crawler (1.11.0), ai.mattmann.mnemosyne:cas-filemgr (1.11.0) +26 more potentially affected by CVE-2015-8797 via org.apache.solr:solr-core (1.3.0)

org.apache.solr:solr-core MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - ai.mattmann.mnemosyne:cas-crawler 1.11.0 - ai.mattmann.mnemosyne:cas-filemgr 1.11.0 -...

org.apache.solr:solr (4.0.0-alpha), org.apache.solr:solr-analysis-extras (4.0.0-alpha) +8 more potentially affected by CVE-2015-8797 via org.apache.solr:solr-core (4.0.0-alpha)

org.apache.solr:solr-core MAVEN version 4.0.0-alpha is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - org.apache.solr:solr 4.0.0-alpha - org.apache.solr:solr-analysis-extras 4.0.0-alpha -...

org.apache.solr:solr (4.0.0-beta), org.apache.solr:solr-analysis-extras (4.0.0-beta) +8 more potentially affected by CVE-2015-8797 via org.apache.solr:solr-core (4.0.0-beta)

org.apache.solr:solr-core MAVEN version 4.0.0-beta is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - org.apache.solr:solr 4.0.0-beta - org.apache.solr:solr-analysis-extras 4.0.0-beta -...

com.chenlb.mmseg4j:mmseg4j-for-solr40 (1.0.0), com.chenlb.mmseg4j:mmseg4j-solr (1.9.0) +25 more potentially affected by CVE-2015-8797 via org.apache.solr:solr-core (4.0.0)

org.apache.solr:solr-core MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - com.chenlb.mmseg4j:mmseg4j-for-solr40 1.0.0 - com.chenlb.mmseg4j:mmseg4j-solr 1.9.0 -...

com.github.jknack:mwa-solr4 (>=0.3.11, <=0.4.0), org.apache.jackrabbit:oak-solr-embedded (>=0.11, <=0.17.1) +11 more potentially affected by CVE-2015-8797 via org.apache.solr:solr-core (4.1.0)

org.apache.solr:solr-core MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - com.github.jknack:mwa-solr4 =0.3.11, =0.11, =0.11, =0.17.1 - org.apache.solr:solr 4.1.0 -...

de.eonas.portal:opencmsinstaller (>=9.0.0.1, <=9.5.2.0), de.eonas.portal:opencmsportaldriver (>=9.5.1.0, <=9.5.2.0) +22 more potentially affected by CVE-2015-8797 via org.apache.solr:solr-core (4.3.0)

org.apache.solr:solr-core MAVEN version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - de.eonas.portal:opencmsinstaller =9.0.0.1, =9.5.1.0, =9.0.1, =9.0.0, =9.0.1, =9.0.0, =9.0.1, =9.0.0, =9.0.0,...

com.github.jknack:mwa-solr3 (>=0.3.4, <=0.3.10), com.tobedevoured:solr_sail (0.0.2) +111 more potentially affected by CVE-2015-8797 via org.apache.solr:solr-core (3.6.1)

org.apache.solr:solr-core MAVEN version 3.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - com.github.jknack:mwa-solr3 =0.3.4, =8.5.1.1, =1.0.4, =1.0.0, =1.0.1 - org.apache.solr:solr 3.6.1 -...

CVE-2015-8797

Cross-site scripting XSS vulnerability in webapp/web/js/scripts/plugins.js in the stats page in the Admin UI in Apache Solr before 5.3.1 allows remote attackers to inject arbitrary web script or HTML via the entry parameter to a plugins/cache URI...

CVE-2015-8797

Cross-site scripting XSS vulnerability in webapp/web/js/scripts/plugins.js in the stats page in the Admin UI in Apache Solr before 5.3.1 allows remote attackers to inject arbitrary web script or HTML via the entry parameter to a plugins/cache URI...

ai.mattmann.mnemosyne:cas-crawler (1.11.0), ai.mattmann.mnemosyne:cas-filemgr (1.11.0) +283 more potentially affected by CVE-2015-8797 via org.apache.solr:solr-core (>=1.3.0, <=4.3.0)

org.apache.solr:solr-core MAVEN version =1.3.0, =3.0.0, =3.0.0, =1.8.6, =0.40, =0.40, =0.43.3 and more Source cves: CVE-2015-8797 Source advisory: MEND:CVE-2015-8797...

CVE-2015-8797

CVE-2015-8797 affects Apache Solr prior to 5.3.1, where a cross-site scripting (XSS) flaw exists in webapp/web/js/scripts/plugins.js on the Admin UI statistics page. The vulnerability allows remote injection of script/HTML via the entry parameter to the plugins/cache URI. No exploitation details ...

CVE-2015-8797

Cross-site scripting XSS vulnerability in webapp/web/js/scripts/plugins.js in the stats page in the Admin UI in Apache Solr before 5.3.1 allows remote attackers to inject arbitrary web script or HTML via the entry parameter to a plugins/cache URI...