Approved changes feed: RSS · Atom

cpe:2.3:a:apache:solr:4.6.0:*:*:*:*:*:*:*

part: a version: 4.6.0 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductSolr (e541f611-5f4f-518b-9c5a-edac6afba2d9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/solr purl2cpe 2026-06-01 10:14:26.416203
pkg:github/apache/solr purl2cpe 2026-06-01 10:14:26.416205
pkg:maven/org.apache.solr/solr purl2cpe 2026-06-01 10:14:26.416207
pkg:maven/org.apache.solr/solrj purl2cpe 2026-06-01 10:14:26.416208
pkg:rpm/opensuse/solr purl2cpe 2026-06-01 10:14:26.416210
pkg:sourceforge/apache-solr purl2cpe 2026-06-01 10:14:26.416211

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3628 vulnerable 2026-06-08 05:05:41.911558 Details available
Cross-site scripting (XSS) vulnerability in the Admin UI Plugin / Stats page in Apache Solr 4.x before 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the fieldvaluecache object.
Published: 2015-01-06T15:00:00.000Z
Updated: 2024-08-06T10:50:18.279Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.