CVE-2015-8797

CVE-2015-8797 affects Apache Solr prior to 5.3.1, where a cross-site scripting (XSS) flaw exists in webapp/web/js/scripts/plugins.js on the Admin UI statistics page. The vulnerability allows remote injection of script/HTML via the entry parameter to the plugins/cache URI. No exploitation details ...

CVE-2015-8796

CVE-2015-8796 is an XSS in Apache Solr's Admin UI (webapp/web/js/scripts/schema-browser.js) that allows a remote attacker to inject arbitrary web script or HTML via a crafted schema-browse URL. The vulnerability is stated for Solr before version 5.3. Documents provide the affected component and t...

CVE-2015-8795

Apache Solr CVE-2015-8795 affects the Admin UI and is described as multiple cross-site scripting (XSS) vulnerabilities in Solr versions prior to 5.1. The issues arise from improper handling of user-provided fields during rendering on the Analysis page (webapp/web/js/scripts/analysis.js) and the S...