CVE-2014-3628: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Admin UI Plugin / Stats page in Apache Solr 4.x before 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the fieldvaluecache object...

PT-2015-3729

Name of the Vulnerable Software and Affected Versions Apache Solr versions 4.x through 4.10.2 Description A cross-site scripting XSS issue exists in the Admin UI Plugin / Stats page, allowing remote attackers to inject arbitrary web script or HTML via the fieldvaluecache object. Recommendations F...