Read the docs
Red Hat Security Advisory

RHSA-2013:1844

Red Hat JBoss Web Framework Kit 2.4.0 update

Released 2013-12-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 4 records

TI-2012-05330 CVE-2012-6612 · GHSA-6cpj-3g83-q2j4

The (1) UpdateRequestHandler for XSLT or (2) XPathEntityProcessor in Apache Solr before…

Priority MEDIUM 45

The (1) UpdateRequestHandler for XSLT or (2) XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.10075 Published 2013-12-07 Fixed in 4.1.0 CWE-611
TI-2013-05362 CVE-2013-6408 · GHSA-45w3-2hvv-pfxq

The DocumentAnalysisRequestHandler in Apache Solr before 4.3.1 does not properly use the…

Priority MEDIUM 42

The DocumentAnalysisRequestHandler in Apache Solr before 4.3.1 does not properly use the EmptyEntityResolver, which allows remote attackers to have an unspecified impact via XML data containing an external entity declara…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.114 Published 2013-12-07 Fixed in 4.3.1 CWE-91