CVE-2017-12629
Remote code execution occurs in Apache Solr
9.8 CriticalPublic exploitFix available
Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses Lucene, is NOT vulnerable to this. Note that the XML external entity expansion vulnerability occurs in the XML Query Parser which is available, by default, for any query request with parameters deftype=xmlparser and can be exploited to upload malicious data to the /upload request handler or as Blind XXE using ftp wrapper in order to read arbitrary local files from the Solr server. Note also that the second vulnerability relates to remote code execution using the RunExecutableListener available on all affected versions of Solr.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
91.9%Up 34.7 points since Apr 14, 2021
What each source reports
NVD Score used
Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses Lucene, is NOT vulnerable to this. Note that the XML external entity expansion vulnerability occurs in the XML Query Parser which is available, by default, for any query request with parameters deftype=xmlparser and can be exploited to upload malicious data to the /upload request handler or as Blind XXE using ftp wrapper in order to read arbitrary local files from the Solr server. Note also that the second vulnerability relates to remote code execution using the RunExecutableListener available on all affected versions of Solr.
- Record
CVE-2017-12629- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-611
- Updated
- 2026-11-02
CVE List No score
Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses Lucene, is NOT vulnerable to this. Note that the XML external entity expansion vulnerability occurs in the XML Query Parser which is available, by default, for any query request with parameters deftype=xmlparser and can be exploited to upload malicious data to the /upload request handler or as Blind XXE using ftp wrapper in order to read arbitrary local files from the Solr server. Note also that the second vulnerability relates to remote code execution using the RunExecutableListener available on all affected versions of Solr.
- Record
CVE-2017-12629- Updated
- 2026-11-02
EUVDEUVD-2018-0640 No score
Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses Lucene, is NOT vulnerable to this. Note that the XML external entity expansion vulnerability occurs in the XML Query Parser which is available, by default, for any query request with parameters deftype=xmlparser and can be exploited to upload malicious data to the /upload request handler or as Blind XXE using ftp wrapper in order to read arbitrary local files from the Solr server. Note also that the second vulnerability relates to remote code execution using the RunExecutableListener available on all affected versions of Solr.
- Record
EUVD-2018-0640- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mh7g-99w9-xpjm
Remote code execution occurs in Apache Solr
Remote code execution occurs in Apache Solr before versions 5.5.5, 6.6.2 and 7.1.0 by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses Lucene, is NOT vulnerable to this. Note that the XML external entity expansion vulnerability occurs in the XML Query Parser which is available, by default, for any query request with parameters deftype=xmlparser and can be exploited to upload malicious data to the /upload request handler or as Blind XXE using ftp wrapper in order to read arbitrary local files from the Solr server. Note also that the second vulnerability relates to remote code execution using the RunExecutableListener available on all affected versions of Solr
- Record
GHSA-mh7g-99w9-xpjm- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-611
- Updated
- 2026-11-02
OSV
Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses Lucene, is NOT vulnerable to this. Note that the XML external entity expansion vulnerability occurs in the XML Query Parser which is available, by default, for any query request with parameters deftype=xmlparser and can be exploited to upload malicious data to the /upload request handler or as Blind XXE using ftp wrapper in order to read arbitrary local files from the Solr server. Note also that the second vulnerability relates to remote code execution using the RunExecutableListener available on all affected versions of Solr.
- Record
CVE-2017-12629- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2017-12629
Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses Lucene, is NOT vulnerable to this. Note that the XML external entity expansion vulnerability occurs in the XML Query Parser which is available, by default, for any query request with parameters deftype=xmlparser and can be exploited to upload malicious data to the /upload request handler or as Blind XXE using ftp wrapper in order to read arbitrary local files from the Solr server. Note also that the second vulnerability relates to remote code execution using the RunExecutableListener available on all affected versions of Solr.
- Record
DEBIAN-CVE-2017-12629- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 10 moreShow less
OSVGHSA-mh7g-99w9-xpjm
Remote code execution occurs in Apache Solr
Remote code execution occurs in Apache Solr before versions 5.5.5, 6.6.2 and 7.1.0 by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses Lucene, is NOT vulnerable to this. Note that the XML external entity expansion vulnerability occurs in the XML Query Parser which is available, by default, for any query request with parameters deftype=xmlparser and can be exploited to upload malicious data to the /upload request handler or as Blind XXE using ftp wrapper in order to read arbitrary local files from the Solr server. Note also that the second vulnerability relates to remote code execution using the RunExecutableListener available on all affected versions of Solr
- Record
GHSA-mh7g-99w9-xpjm- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-611
- Updated
- 2026-11-02
OSVRHSA-2017:3123
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform security update
- Record
RHSA-2017:3123- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2017:3451
Red Hat Security Advisory: rh-java-common-lucene security update
- Record
RHSA-2017:3451- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2017:3452
Red Hat Security Advisory: rh-java-common-lucene5 security update
- Record
RHSA-2017:3452- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2018:0002
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.0.9 security update on RHEL 6
- Record
RHSA-2018:0002- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2018:0004
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.0.9 security update on RHEL 7
- Record
RHSA-2018:0004- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2018:0005
Red Hat Security Advisory: eap7-jboss-ec2-eap security update
- Record
RHSA-2018:0005- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2017-12629
Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses Lucene, is NOT vulnerable to this. Note that the XML external entity expansion vulnerability occurs in the XML Query Parser which is available, by default, for any query request with parameters deftype=xmlparser and can be exploited to upload malicious data to the /upload request handler or as Blind XXE using ftp wrapper in order to read arbitrary local files from the Solr server. Note also that the second vulnerability relates to remote code execution using the RunExecutableListener available on all affected versions of Solr.
- Record
UBUNTU-CVE-2017-12629- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2017-0403 No score
Updated lucene packages fix security vulnerability
It was found that the CoreParser class in Lucene accepts doctype declaration and expands external entities. An attacker could use this flaw to bypass security restrictions and access sensitive data (CVE-2017-12629).
- Record
MGASA-2017-0403- Updated
- 2026-11-02
OSVUSN-4259-1 No score
Apache Solr vulnerability
Michael Stepankin and Olga Barinova discovered that Apache Solr was vulnerable to an XXE attack. An attacker could use this vulnerability to remotely execute code.
- Record
USN-4259-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.apache.solr:solr-coreMaven |
7.0.0 up to 7.1.0 | 7.1.0 |
org.apache.solr:solr-coreMaven |
6.0.0 up to 6.6.2 | 6.6.2 |
org.apache.solr:solr-coreMaven |
5.5.0 up to 5.5.5 | 5.5.5 |
lucene-solrDebian:12 |
before 3.6.2+dfsg-11 | 3.6.2+dfsg-11 |
lucene-solrDebian:13 |
before 3.6.2+dfsg-11 | 3.6.2+dfsg-11 |
lucene-solrDebian:14 |
before 3.6.2+dfsg-11 | 3.6.2+dfsg-11 |
lucene-solrDebian:7 |
before 3.6.0+dfsg-1+deb7u3, plus listed versions 3.6.0+dfsg-13.6.0+dfsg-1+deb7u13.6.0+dfsg-1+deb7u2 |
3.6.0+dfsg-1+deb7u3 |
lucene-solrDebian:8 From an advisory covering 2 CVEs |
before 3.6.2+dfsg-5+deb8u1, plus listed versions 3.6.2+dfsg-5 |
3.6.2+dfsg-5+deb8u1 |
lucene-solrDebian:9 From an advisory covering 2 CVEs |
before 3.6.2+dfsg-10+deb9u1, plus listed versions 3.6.2+dfsg-10 |
3.6.2+dfsg-10+deb9u1 |
org.apache.solr:solr-coreMaven |
7.0.0 up to 7.1.0, plus listed versions 7.0.1 |
7.1.0 |
Show 217 moreShow less
| Package | Affected | Fixed |
|---|---|---|
org.apache.solr:solr-coreMaven |
6.0.0 up to 6.6.2, plus listed versions 6.0.16.1.06.2.06.2.16.3.0 Show 7 moreShow less6.4.06.4.16.4.26.5.06.5.16.6.06.6.1 |
6.6.2 |
org.apache.solr:solr-coreMaven |
5.5.0 up to 5.5.5, plus listed versions 5.5.15.5.25.5.35.5.4 |
5.5.5 |
luceneMageia:6 |
before 5.5.0-4.1.mga6 | 5.5.0-4.1.mga6 |
eap7-lucene-analyzers-commonRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:5.3.1-4.redhat_2.1.ep7.el6 | 0:5.3.1-4.redhat_2.1.ep7.el6 |
eap7-lucene-backward-codecsRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:5.3.1-4.redhat_2.1.ep7.el6 | 0:5.3.1-4.redhat_2.1.ep7.el6 |
eap7-lucene-coreRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:5.3.1-4.redhat_2.1.ep7.el6 | 0:5.3.1-4.redhat_2.1.ep7.el6 |
eap7-lucene-facetRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:5.3.1-4.redhat_2.1.ep7.el6 | 0:5.3.1-4.redhat_2.1.ep7.el6 |
eap7-lucene-miscRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:5.3.1-4.redhat_2.1.ep7.el6 | 0:5.3.1-4.redhat_2.1.ep7.el6 |
eap7-lucene-queriesRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:5.3.1-4.redhat_2.1.ep7.el6 | 0:5.3.1-4.redhat_2.1.ep7.el6 |
eap7-lucene-queryparserRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:5.3.1-4.redhat_2.1.ep7.el6 | 0:5.3.1-4.redhat_2.1.ep7.el6 |
eap7-lucene-solrRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:5.3.1-4.redhat_2.1.ep7.el6 | 0:5.3.1-4.redhat_2.1.ep7.el6 |
eap7-lucene-analyzers-commonRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:5.3.1-4.redhat_2.1.ep7.el7 | 0:5.3.1-4.redhat_2.1.ep7.el7 |
eap7-lucene-backward-codecsRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:5.3.1-4.redhat_2.1.ep7.el7 | 0:5.3.1-4.redhat_2.1.ep7.el7 |
eap7-lucene-coreRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:5.3.1-4.redhat_2.1.ep7.el7 | 0:5.3.1-4.redhat_2.1.ep7.el7 |
eap7-lucene-facetRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:5.3.1-4.redhat_2.1.ep7.el7 | 0:5.3.1-4.redhat_2.1.ep7.el7 |
eap7-lucene-miscRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:5.3.1-4.redhat_2.1.ep7.el7 | 0:5.3.1-4.redhat_2.1.ep7.el7 |
eap7-lucene-queriesRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:5.3.1-4.redhat_2.1.ep7.el7 | 0:5.3.1-4.redhat_2.1.ep7.el7 |
eap7-lucene-queryparserRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:5.3.1-4.redhat_2.1.ep7.el7 | 0:5.3.1-4.redhat_2.1.ep7.el7 |
eap7-lucene-solrRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:5.3.1-4.redhat_2.1.ep7.el7 | 0:5.3.1-4.redhat_2.1.ep7.el7 |
rh-java-common-luceneRed Hat:rhel_software_collections:3::el6 |
before 0:4.8.0-6.9.el6 | 0:4.8.0-6.9.el6 |
rh-java-common-lucene-analysisRed Hat:rhel_software_collections:3::el6 |
before 0:4.8.0-6.9.el6 | 0:4.8.0-6.9.el6 |
rh-java-common-lucene-analyzers-phoneticRed Hat:rhel_software_collections:3::el6 |
before 0:4.8.0-6.9.el6 | 0:4.8.0-6.9.el6 |
rh-java-common-lucene-analyzers-smartcnRed Hat:rhel_software_collections:3::el6 |
before 0:4.8.0-6.9.el6 | 0:4.8.0-6.9.el6 |
rh-java-common-lucene-analyzers-stempelRed Hat:rhel_software_collections:3::el6 |
before 0:4.8.0-6.9.el6 | 0:4.8.0-6.9.el6 |
rh-java-common-lucene-classificationRed Hat:rhel_software_collections:3::el6 |
before 0:4.8.0-6.9.el6 | 0:4.8.0-6.9.el6 |
rh-java-common-lucene-codecsRed Hat:rhel_software_collections:3::el6 |
before 0:4.8.0-6.9.el6 | 0:4.8.0-6.9.el6 |
rh-java-common-lucene-facetRed Hat:rhel_software_collections:3::el6 |
before 0:4.8.0-6.9.el6 | 0:4.8.0-6.9.el6 |
rh-java-common-lucene-groupingRed Hat:rhel_software_collections:3::el6 |
before 0:4.8.0-6.9.el6 | 0:4.8.0-6.9.el6 |
rh-java-common-lucene-highlighterRed Hat:rhel_software_collections:3::el6 |
before 0:4.8.0-6.9.el6 | 0:4.8.0-6.9.el6 |
rh-java-common-lucene-javadocRed Hat:rhel_software_collections:3::el6 |
before 0:4.8.0-6.9.el6 | 0:4.8.0-6.9.el6 |
rh-java-common-lucene-joinRed Hat:rhel_software_collections:3::el6 |
before 0:4.8.0-6.9.el6 | 0:4.8.0-6.9.el6 |
rh-java-common-lucene-memoryRed Hat:rhel_software_collections:3::el6 |
before 0:4.8.0-6.9.el6 | 0:4.8.0-6.9.el6 |
rh-java-common-lucene-miscRed Hat:rhel_software_collections:3::el6 |
before 0:4.8.0-6.9.el6 | 0:4.8.0-6.9.el6 |
rh-java-common-lucene-parentRed Hat:rhel_software_collections:3::el6 |
before 0:4.8.0-6.9.el6 | 0:4.8.0-6.9.el6 |
rh-java-common-lucene-queriesRed Hat:rhel_software_collections:3::el6 |
before 0:4.8.0-6.9.el6 | 0:4.8.0-6.9.el6 |
rh-java-common-lucene-queryparserRed Hat:rhel_software_collections:3::el6 |
before 0:4.8.0-6.9.el6 | 0:4.8.0-6.9.el6 |
rh-java-common-lucene-replicatorRed Hat:rhel_software_collections:3::el6 |
before 0:4.8.0-6.9.el6 | 0:4.8.0-6.9.el6 |
rh-java-common-lucene-sandboxRed Hat:rhel_software_collections:3::el6 |
before 0:4.8.0-6.9.el6 | 0:4.8.0-6.9.el6 |
rh-java-common-lucene-solr-grandparentRed Hat:rhel_software_collections:3::el6 |
before 0:4.8.0-6.9.el6 | 0:4.8.0-6.9.el6 |
rh-java-common-lucene-suggestRed Hat:rhel_software_collections:3::el6 |
before 0:4.8.0-6.9.el6 | 0:4.8.0-6.9.el6 |
rh-java-common-luceneRed Hat:rhel_software_collections:3::el7 |
before 0:4.8.0-6.9.el7 | 0:4.8.0-6.9.el7 |
rh-java-common-lucene-analysisRed Hat:rhel_software_collections:3::el7 |
before 0:4.8.0-6.9.el7 | 0:4.8.0-6.9.el7 |
rh-java-common-lucene-analyzers-phoneticRed Hat:rhel_software_collections:3::el7 |
before 0:4.8.0-6.9.el7 | 0:4.8.0-6.9.el7 |
rh-java-common-lucene-analyzers-smartcnRed Hat:rhel_software_collections:3::el7 |
before 0:4.8.0-6.9.el7 | 0:4.8.0-6.9.el7 |
rh-java-common-lucene-analyzers-stempelRed Hat:rhel_software_collections:3::el7 |
before 0:4.8.0-6.9.el7 | 0:4.8.0-6.9.el7 |
rh-java-common-lucene-classificationRed Hat:rhel_software_collections:3::el7 |
before 0:4.8.0-6.9.el7 | 0:4.8.0-6.9.el7 |
rh-java-common-lucene-codecsRed Hat:rhel_software_collections:3::el7 |
before 0:4.8.0-6.9.el7 | 0:4.8.0-6.9.el7 |
rh-java-common-lucene-facetRed Hat:rhel_software_collections:3::el7 |
before 0:4.8.0-6.9.el7 | 0:4.8.0-6.9.el7 |
rh-java-common-lucene-groupingRed Hat:rhel_software_collections:3::el7 |
before 0:4.8.0-6.9.el7 | 0:4.8.0-6.9.el7 |
rh-java-common-lucene-highlighterRed Hat:rhel_software_collections:3::el7 |
before 0:4.8.0-6.9.el7 | 0:4.8.0-6.9.el7 |
rh-java-common-lucene-javadocRed Hat:rhel_software_collections:3::el7 |
before 0:4.8.0-6.9.el7 | 0:4.8.0-6.9.el7 |
rh-java-common-lucene-joinRed Hat:rhel_software_collections:3::el7 |
before 0:4.8.0-6.9.el7 | 0:4.8.0-6.9.el7 |
rh-java-common-lucene-memoryRed Hat:rhel_software_collections:3::el7 |
before 0:4.8.0-6.9.el7 | 0:4.8.0-6.9.el7 |
rh-java-common-lucene-miscRed Hat:rhel_software_collections:3::el7 |
before 0:4.8.0-6.9.el7 | 0:4.8.0-6.9.el7 |
rh-java-common-lucene-parentRed Hat:rhel_software_collections:3::el7 |
before 0:4.8.0-6.9.el7 | 0:4.8.0-6.9.el7 |
rh-java-common-lucene-queriesRed Hat:rhel_software_collections:3::el7 |
before 0:4.8.0-6.9.el7 | 0:4.8.0-6.9.el7 |
rh-java-common-lucene-queryparserRed Hat:rhel_software_collections:3::el7 |
before 0:4.8.0-6.9.el7 | 0:4.8.0-6.9.el7 |
rh-java-common-lucene-replicatorRed Hat:rhel_software_collections:3::el7 |
before 0:4.8.0-6.9.el7 | 0:4.8.0-6.9.el7 |
rh-java-common-lucene-sandboxRed Hat:rhel_software_collections:3::el7 |
before 0:4.8.0-6.9.el7 | 0:4.8.0-6.9.el7 |
rh-java-common-lucene-solr-grandparentRed Hat:rhel_software_collections:3::el7 |
before 0:4.8.0-6.9.el7 | 0:4.8.0-6.9.el7 |
rh-java-common-lucene-suggestRed Hat:rhel_software_collections:3::el7 |
before 0:4.8.0-6.9.el7 | 0:4.8.0-6.9.el7 |
rh-java-common-lucene5Red Hat:rhel_software_collections:3::el6 |
before 0:5.4.1-2.4.el6 | 0:5.4.1-2.4.el6 |
rh-java-common-lucene5-analysisRed Hat:rhel_software_collections:3::el6 |
before 0:5.4.1-2.4.el6 | 0:5.4.1-2.4.el6 |
rh-java-common-lucene5-analyzers-smartcnRed Hat:rhel_software_collections:3::el6 |
before 0:5.4.1-2.4.el6 | 0:5.4.1-2.4.el6 |
rh-java-common-lucene5-backward-codecsRed Hat:rhel_software_collections:3::el6 |
before 0:5.4.1-2.4.el6 | 0:5.4.1-2.4.el6 |
rh-java-common-lucene5-classificationRed Hat:rhel_software_collections:3::el6 |
before 0:5.4.1-2.4.el6 | 0:5.4.1-2.4.el6 |
rh-java-common-lucene5-codecsRed Hat:rhel_software_collections:3::el6 |
before 0:5.4.1-2.4.el6 | 0:5.4.1-2.4.el6 |
rh-java-common-lucene5-facetRed Hat:rhel_software_collections:3::el6 |
before 0:5.4.1-2.4.el6 | 0:5.4.1-2.4.el6 |
rh-java-common-lucene5-groupingRed Hat:rhel_software_collections:3::el6 |
before 0:5.4.1-2.4.el6 | 0:5.4.1-2.4.el6 |
rh-java-common-lucene5-highlighterRed Hat:rhel_software_collections:3::el6 |
before 0:5.4.1-2.4.el6 | 0:5.4.1-2.4.el6 |
rh-java-common-lucene5-javadocRed Hat:rhel_software_collections:3::el6 |
before 0:5.4.1-2.4.el6 | 0:5.4.1-2.4.el6 |
rh-java-common-lucene5-joinRed Hat:rhel_software_collections:3::el6 |
before 0:5.4.1-2.4.el6 | 0:5.4.1-2.4.el6 |
rh-java-common-lucene5-memoryRed Hat:rhel_software_collections:3::el6 |
before 0:5.4.1-2.4.el6 | 0:5.4.1-2.4.el6 |
rh-java-common-lucene5-miscRed Hat:rhel_software_collections:3::el6 |
before 0:5.4.1-2.4.el6 | 0:5.4.1-2.4.el6 |
rh-java-common-lucene5-parentRed Hat:rhel_software_collections:3::el6 |
before 0:5.4.1-2.4.el6 | 0:5.4.1-2.4.el6 |
rh-java-common-lucene5-queriesRed Hat:rhel_software_collections:3::el6 |
before 0:5.4.1-2.4.el6 | 0:5.4.1-2.4.el6 |
rh-java-common-lucene5-queryparserRed Hat:rhel_software_collections:3::el6 |
before 0:5.4.1-2.4.el6 | 0:5.4.1-2.4.el6 |
rh-java-common-lucene5-replicatorRed Hat:rhel_software_collections:3::el6 |
before 0:5.4.1-2.4.el6 | 0:5.4.1-2.4.el6 |
rh-java-common-lucene5-sandboxRed Hat:rhel_software_collections:3::el6 |
before 0:5.4.1-2.4.el6 | 0:5.4.1-2.4.el6 |
rh-java-common-lucene5-solr-grandparentRed Hat:rhel_software_collections:3::el6 |
before 0:5.4.1-2.4.el6 | 0:5.4.1-2.4.el6 |
rh-java-common-lucene5-suggestRed Hat:rhel_software_collections:3::el6 |
before 0:5.4.1-2.4.el6 | 0:5.4.1-2.4.el6 |
rh-java-common-lucene5Red Hat:rhel_software_collections:3::el7 |
before 0:5.4.1-2.4.el7 | 0:5.4.1-2.4.el7 |
rh-java-common-lucene5-analysisRed Hat:rhel_software_collections:3::el7 |
before 0:5.4.1-2.4.el7 | 0:5.4.1-2.4.el7 |
rh-java-common-lucene5-analyzers-smartcnRed Hat:rhel_software_collections:3::el7 |
before 0:5.4.1-2.4.el7 | 0:5.4.1-2.4.el7 |
rh-java-common-lucene5-backward-codecsRed Hat:rhel_software_collections:3::el7 |
before 0:5.4.1-2.4.el7 | 0:5.4.1-2.4.el7 |
rh-java-common-lucene5-classificationRed Hat:rhel_software_collections:3::el7 |
before 0:5.4.1-2.4.el7 | 0:5.4.1-2.4.el7 |
rh-java-common-lucene5-codecsRed Hat:rhel_software_collections:3::el7 |
before 0:5.4.1-2.4.el7 | 0:5.4.1-2.4.el7 |
rh-java-common-lucene5-facetRed Hat:rhel_software_collections:3::el7 |
before 0:5.4.1-2.4.el7 | 0:5.4.1-2.4.el7 |
rh-java-common-lucene5-groupingRed Hat:rhel_software_collections:3::el7 |
before 0:5.4.1-2.4.el7 | 0:5.4.1-2.4.el7 |
rh-java-common-lucene5-highlighterRed Hat:rhel_software_collections:3::el7 |
before 0:5.4.1-2.4.el7 | 0:5.4.1-2.4.el7 |
rh-java-common-lucene5-javadocRed Hat:rhel_software_collections:3::el7 |
before 0:5.4.1-2.4.el7 | 0:5.4.1-2.4.el7 |
rh-java-common-lucene5-joinRed Hat:rhel_software_collections:3::el7 |
before 0:5.4.1-2.4.el7 | 0:5.4.1-2.4.el7 |
rh-java-common-lucene5-memoryRed Hat:rhel_software_collections:3::el7 |
before 0:5.4.1-2.4.el7 | 0:5.4.1-2.4.el7 |
rh-java-common-lucene5-miscRed Hat:rhel_software_collections:3::el7 |
before 0:5.4.1-2.4.el7 | 0:5.4.1-2.4.el7 |
rh-java-common-lucene5-parentRed Hat:rhel_software_collections:3::el7 |
before 0:5.4.1-2.4.el7 | 0:5.4.1-2.4.el7 |
rh-java-common-lucene5-queriesRed Hat:rhel_software_collections:3::el7 |
before 0:5.4.1-2.4.el7 | 0:5.4.1-2.4.el7 |
rh-java-common-lucene5-queryparserRed Hat:rhel_software_collections:3::el7 |
before 0:5.4.1-2.4.el7 | 0:5.4.1-2.4.el7 |
rh-java-common-lucene5-replicatorRed Hat:rhel_software_collections:3::el7 |
before 0:5.4.1-2.4.el7 | 0:5.4.1-2.4.el7 |
rh-java-common-lucene5-sandboxRed Hat:rhel_software_collections:3::el7 |
before 0:5.4.1-2.4.el7 | 0:5.4.1-2.4.el7 |
rh-java-common-lucene5-solr-grandparentRed Hat:rhel_software_collections:3::el7 |
before 0:5.4.1-2.4.el7 | 0:5.4.1-2.4.el7 |
rh-java-common-lucene5-suggestRed Hat:rhel_software_collections:3::el7 |
before 0:5.4.1-2.4.el7 | 0:5.4.1-2.4.el7 |
eap7-activemq-artemisRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:1.1.0-19.SP24_redhat_1.1.ep7.el6 | 0:1.1.0-19.SP24_redhat_1.1.ep7.el6 |
eap7-activemq-artemis-cliRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:1.1.0-19.SP24_redhat_1.1.ep7.el6 | 0:1.1.0-19.SP24_redhat_1.1.ep7.el6 |
eap7-activemq-artemis-commonsRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:1.1.0-19.SP24_redhat_1.1.ep7.el6 | 0:1.1.0-19.SP24_redhat_1.1.ep7.el6 |
eap7-activemq-artemis-core-clientRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:1.1.0-19.SP24_redhat_1.1.ep7.el6 | 0:1.1.0-19.SP24_redhat_1.1.ep7.el6 |
eap7-activemq-artemis-dtoRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:1.1.0-19.SP24_redhat_1.1.ep7.el6 | 0:1.1.0-19.SP24_redhat_1.1.ep7.el6 |
eap7-activemq-artemis-hornetq-protocolRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:1.1.0-19.SP24_redhat_1.1.ep7.el6 | 0:1.1.0-19.SP24_redhat_1.1.ep7.el6 |
eap7-activemq-artemis-hqclient-protocolRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:1.1.0-19.SP24_redhat_1.1.ep7.el6 | 0:1.1.0-19.SP24_redhat_1.1.ep7.el6 |
eap7-activemq-artemis-jms-clientRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:1.1.0-19.SP24_redhat_1.1.ep7.el6 | 0:1.1.0-19.SP24_redhat_1.1.ep7.el6 |
eap7-activemq-artemis-jms-serverRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:1.1.0-19.SP24_redhat_1.1.ep7.el6 | 0:1.1.0-19.SP24_redhat_1.1.ep7.el6 |
eap7-activemq-artemis-journalRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:1.1.0-19.SP24_redhat_1.1.ep7.el6 | 0:1.1.0-19.SP24_redhat_1.1.ep7.el6 |
eap7-activemq-artemis-nativeRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:1.1.0-19.SP24_redhat_1.1.ep7.el6 | 0:1.1.0-19.SP24_redhat_1.1.ep7.el6 |
eap7-activemq-artemis-raRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:1.1.0-19.SP24_redhat_1.1.ep7.el6 | 0:1.1.0-19.SP24_redhat_1.1.ep7.el6 |
eap7-activemq-artemis-selectorRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:1.1.0-19.SP24_redhat_1.1.ep7.el6 | 0:1.1.0-19.SP24_redhat_1.1.ep7.el6 |
eap7-activemq-artemis-serverRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:1.1.0-19.SP24_redhat_1.1.ep7.el6 | 0:1.1.0-19.SP24_redhat_1.1.ep7.el6 |
eap7-activemq-artemis-service-extensionsRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:1.1.0-19.SP24_redhat_1.1.ep7.el6 | 0:1.1.0-19.SP24_redhat_1.1.ep7.el6 |
eap7-hibernateRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:5.0.16-1.Final_redhat_1.1.ep7.el6 | 0:5.0.16-1.Final_redhat_1.1.ep7.el6 |
eap7-hibernate-coreRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:5.0.16-1.Final_redhat_1.1.ep7.el6 | 0:5.0.16-1.Final_redhat_1.1.ep7.el6 |
eap7-hibernate-entitymanagerRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:5.0.16-1.Final_redhat_1.1.ep7.el6 | 0:5.0.16-1.Final_redhat_1.1.ep7.el6 |
eap7-hibernate-enversRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:5.0.16-1.Final_redhat_1.1.ep7.el6 | 0:5.0.16-1.Final_redhat_1.1.ep7.el6 |
eap7-hibernate-infinispanRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:5.0.16-1.Final_redhat_1.1.ep7.el6 | 0:5.0.16-1.Final_redhat_1.1.ep7.el6 |
eap7-hibernate-java8Red Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:5.0.16-1.Final_redhat_1.1.ep7.el6 | 0:5.0.16-1.Final_redhat_1.1.ep7.el6 |
eap7-ironjacamarRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:1.3.8-1.Final_redhat_1.1.ep7.el6 | 0:1.3.8-1.Final_redhat_1.1.ep7.el6 |
eap7-ironjacamar-common-apiRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:1.3.8-1.Final_redhat_1.1.ep7.el6 | 0:1.3.8-1.Final_redhat_1.1.ep7.el6 |
eap7-ironjacamar-common-implRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:1.3.8-1.Final_redhat_1.1.ep7.el6 | 0:1.3.8-1.Final_redhat_1.1.ep7.el6 |
eap7-ironjacamar-common-spiRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:1.3.8-1.Final_redhat_1.1.ep7.el6 | 0:1.3.8-1.Final_redhat_1.1.ep7.el6 |
eap7-ironjacamar-core-apiRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:1.3.8-1.Final_redhat_1.1.ep7.el6 | 0:1.3.8-1.Final_redhat_1.1.ep7.el6 |
eap7-ironjacamar-core-implRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:1.3.8-1.Final_redhat_1.1.ep7.el6 | 0:1.3.8-1.Final_redhat_1.1.ep7.el6 |
eap7-ironjacamar-deployers-commonRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:1.3.8-1.Final_redhat_1.1.ep7.el6 | 0:1.3.8-1.Final_redhat_1.1.ep7.el6 |
eap7-ironjacamar-jdbcRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:1.3.8-1.Final_redhat_1.1.ep7.el6 | 0:1.3.8-1.Final_redhat_1.1.ep7.el6 |
eap7-ironjacamar-validatorRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:1.3.8-1.Final_redhat_1.1.ep7.el6 | 0:1.3.8-1.Final_redhat_1.1.ep7.el6 |
eap7-jboss-remotingRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:4.0.25-1.Final_redhat_1.1.ep7.el6 | 0:4.0.25-1.Final_redhat_1.1.ep7.el6 |
eap7-jboss-xnio-baseRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:3.4.7-1.Final_redhat_1.1.ep7.el6 | 0:3.4.7-1.Final_redhat_1.1.ep7.el6 |
eap7-jgroupsRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:3.6.12-1.Final_redhat_1.1.ep7.el6 | 0:3.6.12-1.Final_redhat_1.1.ep7.el6 |
eap7-resteasyRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:3.0.19-7.SP5_redhat_1.1.ep7.el6 | 0:3.0.19-7.SP5_redhat_1.1.ep7.el6 |
eap7-resteasy-async-http-servlet-3.0Red Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:3.0.19-7.SP5_redhat_1.1.ep7.el6 | 0:3.0.19-7.SP5_redhat_1.1.ep7.el6 |
eap7-resteasy-atom-providerRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:3.0.19-7.SP5_redhat_1.1.ep7.el6 | 0:3.0.19-7.SP5_redhat_1.1.ep7.el6 |
eap7-resteasy-cdiRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:3.0.19-7.SP5_redhat_1.1.ep7.el6 | 0:3.0.19-7.SP5_redhat_1.1.ep7.el6 |
eap7-resteasy-clientRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:3.0.19-7.SP5_redhat_1.1.ep7.el6 | 0:3.0.19-7.SP5_redhat_1.1.ep7.el6 |
eap7-resteasy-cryptoRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:3.0.19-7.SP5_redhat_1.1.ep7.el6 | 0:3.0.19-7.SP5_redhat_1.1.ep7.el6 |
eap7-resteasy-jackson-providerRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:3.0.19-7.SP5_redhat_1.1.ep7.el6 | 0:3.0.19-7.SP5_redhat_1.1.ep7.el6 |
eap7-resteasy-jackson2-providerRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:3.0.19-7.SP5_redhat_1.1.ep7.el6 | 0:3.0.19-7.SP5_redhat_1.1.ep7.el6 |
eap7-resteasy-jaxb-providerRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:3.0.19-7.SP5_redhat_1.1.ep7.el6 | 0:3.0.19-7.SP5_redhat_1.1.ep7.el6 |
eap7-resteasy-jaxrsRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:3.0.19-7.SP5_redhat_1.1.ep7.el6 | 0:3.0.19-7.SP5_redhat_1.1.ep7.el6 |
eap7-resteasy-jettison-providerRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:3.0.19-7.SP5_redhat_1.1.ep7.el6 | 0:3.0.19-7.SP5_redhat_1.1.ep7.el6 |
eap7-resteasy-jose-jwtRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:3.0.19-7.SP5_redhat_1.1.ep7.el6 | 0:3.0.19-7.SP5_redhat_1.1.ep7.el6 |
eap7-resteasy-jsapiRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:3.0.19-7.SP5_redhat_1.1.ep7.el6 | 0:3.0.19-7.SP5_redhat_1.1.ep7.el6 |
eap7-resteasy-json-p-providerRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:3.0.19-7.SP5_redhat_1.1.ep7.el6 | 0:3.0.19-7.SP5_redhat_1.1.ep7.el6 |
eap7-resteasy-multipart-providerRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:3.0.19-7.SP5_redhat_1.1.ep7.el6 | 0:3.0.19-7.SP5_redhat_1.1.ep7.el6 |
eap7-resteasy-springRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:3.0.19-7.SP5_redhat_1.1.ep7.el6 | 0:3.0.19-7.SP5_redhat_1.1.ep7.el6 |
eap7-resteasy-validator-provider-11Red Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:3.0.19-7.SP5_redhat_1.1.ep7.el6 | 0:3.0.19-7.SP5_redhat_1.1.ep7.el6 |
eap7-resteasy-yaml-providerRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:3.0.19-7.SP5_redhat_1.1.ep7.el6 | 0:3.0.19-7.SP5_redhat_1.1.ep7.el6 |
eap7-undertowRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:1.3.31-3.Final_redhat_3.1.ep7.el6 | 0:1.3.31-3.Final_redhat_3.1.ep7.el6 |
eap7-wildflyRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:7.0.9-4.GA_redhat_3.1.ep7.el6 | 0:7.0.9-4.GA_redhat_3.1.ep7.el6 |
eap7-wildfly-javadocsRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:7.0.9-2.GA_redhat_3.1.ep7.el6 | 0:7.0.9-2.GA_redhat_3.1.ep7.el6 |
eap7-wildfly-modulesRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:7.0.9-4.GA_redhat_3.1.ep7.el6 | 0:7.0.9-4.GA_redhat_3.1.ep7.el6 |
eap7-activemq-artemisRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:1.1.0-19.SP24_redhat_1.1.ep7.el7 | 0:1.1.0-19.SP24_redhat_1.1.ep7.el7 |
eap7-activemq-artemis-cliRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:1.1.0-19.SP24_redhat_1.1.ep7.el7 | 0:1.1.0-19.SP24_redhat_1.1.ep7.el7 |
eap7-activemq-artemis-commonsRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:1.1.0-19.SP24_redhat_1.1.ep7.el7 | 0:1.1.0-19.SP24_redhat_1.1.ep7.el7 |
eap7-activemq-artemis-core-clientRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:1.1.0-19.SP24_redhat_1.1.ep7.el7 | 0:1.1.0-19.SP24_redhat_1.1.ep7.el7 |
eap7-activemq-artemis-dtoRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:1.1.0-19.SP24_redhat_1.1.ep7.el7 | 0:1.1.0-19.SP24_redhat_1.1.ep7.el7 |
eap7-activemq-artemis-hornetq-protocolRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:1.1.0-19.SP24_redhat_1.1.ep7.el7 | 0:1.1.0-19.SP24_redhat_1.1.ep7.el7 |
eap7-activemq-artemis-hqclient-protocolRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:1.1.0-19.SP24_redhat_1.1.ep7.el7 | 0:1.1.0-19.SP24_redhat_1.1.ep7.el7 |
eap7-activemq-artemis-jms-clientRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:1.1.0-19.SP24_redhat_1.1.ep7.el7 | 0:1.1.0-19.SP24_redhat_1.1.ep7.el7 |
eap7-activemq-artemis-jms-serverRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:1.1.0-19.SP24_redhat_1.1.ep7.el7 | 0:1.1.0-19.SP24_redhat_1.1.ep7.el7 |
eap7-activemq-artemis-journalRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:1.1.0-19.SP24_redhat_1.1.ep7.el7 | 0:1.1.0-19.SP24_redhat_1.1.ep7.el7 |
eap7-activemq-artemis-nativeRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:1.1.0-19.SP24_redhat_1.1.ep7.el7 | 0:1.1.0-19.SP24_redhat_1.1.ep7.el7 |
eap7-activemq-artemis-raRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:1.1.0-19.SP24_redhat_1.1.ep7.el7 | 0:1.1.0-19.SP24_redhat_1.1.ep7.el7 |
eap7-activemq-artemis-selectorRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:1.1.0-19.SP24_redhat_1.1.ep7.el7 | 0:1.1.0-19.SP24_redhat_1.1.ep7.el7 |
eap7-activemq-artemis-serverRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:1.1.0-19.SP24_redhat_1.1.ep7.el7 | 0:1.1.0-19.SP24_redhat_1.1.ep7.el7 |
eap7-activemq-artemis-service-extensionsRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:1.1.0-19.SP24_redhat_1.1.ep7.el7 | 0:1.1.0-19.SP24_redhat_1.1.ep7.el7 |
eap7-hibernateRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:5.0.16-1.Final_redhat_1.1.ep7.el7 | 0:5.0.16-1.Final_redhat_1.1.ep7.el7 |
eap7-hibernate-coreRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:5.0.16-1.Final_redhat_1.1.ep7.el7 | 0:5.0.16-1.Final_redhat_1.1.ep7.el7 |
eap7-hibernate-entitymanagerRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:5.0.16-1.Final_redhat_1.1.ep7.el7 | 0:5.0.16-1.Final_redhat_1.1.ep7.el7 |
eap7-hibernate-enversRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:5.0.16-1.Final_redhat_1.1.ep7.el7 | 0:5.0.16-1.Final_redhat_1.1.ep7.el7 |
eap7-hibernate-infinispanRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:5.0.16-1.Final_redhat_1.1.ep7.el7 | 0:5.0.16-1.Final_redhat_1.1.ep7.el7 |
eap7-hibernate-java8Red Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:5.0.16-1.Final_redhat_1.1.ep7.el7 | 0:5.0.16-1.Final_redhat_1.1.ep7.el7 |
eap7-ironjacamarRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:1.3.8-1.Final_redhat_1.1.ep7.el7 | 0:1.3.8-1.Final_redhat_1.1.ep7.el7 |
eap7-ironjacamar-common-apiRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:1.3.8-1.Final_redhat_1.1.ep7.el7 | 0:1.3.8-1.Final_redhat_1.1.ep7.el7 |
eap7-ironjacamar-common-implRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:1.3.8-1.Final_redhat_1.1.ep7.el7 | 0:1.3.8-1.Final_redhat_1.1.ep7.el7 |
eap7-ironjacamar-common-spiRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:1.3.8-1.Final_redhat_1.1.ep7.el7 | 0:1.3.8-1.Final_redhat_1.1.ep7.el7 |
eap7-ironjacamar-core-apiRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:1.3.8-1.Final_redhat_1.1.ep7.el7 | 0:1.3.8-1.Final_redhat_1.1.ep7.el7 |
eap7-ironjacamar-core-implRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:1.3.8-1.Final_redhat_1.1.ep7.el7 | 0:1.3.8-1.Final_redhat_1.1.ep7.el7 |
eap7-ironjacamar-deployers-commonRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:1.3.8-1.Final_redhat_1.1.ep7.el7 | 0:1.3.8-1.Final_redhat_1.1.ep7.el7 |
eap7-ironjacamar-jdbcRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:1.3.8-1.Final_redhat_1.1.ep7.el7 | 0:1.3.8-1.Final_redhat_1.1.ep7.el7 |
eap7-ironjacamar-validatorRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:1.3.8-1.Final_redhat_1.1.ep7.el7 | 0:1.3.8-1.Final_redhat_1.1.ep7.el7 |
eap7-jboss-remotingRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:4.0.25-1.Final_redhat_1.1.ep7.el7 | 0:4.0.25-1.Final_redhat_1.1.ep7.el7 |
eap7-jboss-xnio-baseRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:3.4.7-1.Final_redhat_1.1.ep7.el7 | 0:3.4.7-1.Final_redhat_1.1.ep7.el7 |
eap7-jgroupsRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:3.6.12-1.Final_redhat_1.1.ep7.el7 | 0:3.6.12-1.Final_redhat_1.1.ep7.el7 |
eap7-resteasyRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:3.0.19-7.SP5_redhat_1.1.ep7.el7 | 0:3.0.19-7.SP5_redhat_1.1.ep7.el7 |
eap7-resteasy-async-http-servlet-3.0Red Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:3.0.19-7.SP5_redhat_1.1.ep7.el7 | 0:3.0.19-7.SP5_redhat_1.1.ep7.el7 |
eap7-resteasy-atom-providerRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:3.0.19-7.SP5_redhat_1.1.ep7.el7 | 0:3.0.19-7.SP5_redhat_1.1.ep7.el7 |
eap7-resteasy-cdiRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:3.0.19-7.SP5_redhat_1.1.ep7.el7 | 0:3.0.19-7.SP5_redhat_1.1.ep7.el7 |
eap7-resteasy-clientRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:3.0.19-7.SP5_redhat_1.1.ep7.el7 | 0:3.0.19-7.SP5_redhat_1.1.ep7.el7 |
eap7-resteasy-cryptoRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:3.0.19-7.SP5_redhat_1.1.ep7.el7 | 0:3.0.19-7.SP5_redhat_1.1.ep7.el7 |
eap7-resteasy-jackson-providerRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:3.0.19-7.SP5_redhat_1.1.ep7.el7 | 0:3.0.19-7.SP5_redhat_1.1.ep7.el7 |
eap7-resteasy-jackson2-providerRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:3.0.19-7.SP5_redhat_1.1.ep7.el7 | 0:3.0.19-7.SP5_redhat_1.1.ep7.el7 |
eap7-resteasy-jaxb-providerRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:3.0.19-7.SP5_redhat_1.1.ep7.el7 | 0:3.0.19-7.SP5_redhat_1.1.ep7.el7 |
eap7-resteasy-jaxrsRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:3.0.19-7.SP5_redhat_1.1.ep7.el7 | 0:3.0.19-7.SP5_redhat_1.1.ep7.el7 |
eap7-resteasy-jettison-providerRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:3.0.19-7.SP5_redhat_1.1.ep7.el7 | 0:3.0.19-7.SP5_redhat_1.1.ep7.el7 |
eap7-resteasy-jose-jwtRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:3.0.19-7.SP5_redhat_1.1.ep7.el7 | 0:3.0.19-7.SP5_redhat_1.1.ep7.el7 |
eap7-resteasy-jsapiRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:3.0.19-7.SP5_redhat_1.1.ep7.el7 | 0:3.0.19-7.SP5_redhat_1.1.ep7.el7 |
eap7-resteasy-json-p-providerRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:3.0.19-7.SP5_redhat_1.1.ep7.el7 | 0:3.0.19-7.SP5_redhat_1.1.ep7.el7 |
eap7-resteasy-multipart-providerRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:3.0.19-7.SP5_redhat_1.1.ep7.el7 | 0:3.0.19-7.SP5_redhat_1.1.ep7.el7 |
eap7-resteasy-springRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:3.0.19-7.SP5_redhat_1.1.ep7.el7 | 0:3.0.19-7.SP5_redhat_1.1.ep7.el7 |
eap7-resteasy-validator-provider-11Red Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:3.0.19-7.SP5_redhat_1.1.ep7.el7 | 0:3.0.19-7.SP5_redhat_1.1.ep7.el7 |
eap7-resteasy-yaml-providerRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:3.0.19-7.SP5_redhat_1.1.ep7.el7 | 0:3.0.19-7.SP5_redhat_1.1.ep7.el7 |
eap7-undertowRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:1.3.31-3.Final_redhat_3.1.ep7.el7 | 0:1.3.31-3.Final_redhat_3.1.ep7.el7 |
eap7-wildflyRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:7.0.9-4.GA_redhat_3.1.ep7.el7 | 0:7.0.9-4.GA_redhat_3.1.ep7.el7 |
eap7-wildfly-javadocsRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:7.0.9-2.GA_redhat_3.1.ep7.el7 | 0:7.0.9-2.GA_redhat_3.1.ep7.el7 |
eap7-wildfly-modulesRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:7.0.9-4.GA_redhat_3.1.ep7.el7 | 0:7.0.9-4.GA_redhat_3.1.ep7.el7 |
eap7-jboss-ec2-eapRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:7.0.9-2.GA_redhat_2.ep7.el6 | 0:7.0.9-2.GA_redhat_2.ep7.el6 |
eap7-jboss-ec2-eap-samplesRed Hat:jboss_enterprise_application_platform:7::el6 From an advisory covering 7 CVEs |
before 0:7.0.9-2.GA_redhat_2.ep7.el6 | 0:7.0.9-2.GA_redhat_2.ep7.el6 |
eap7-jboss-ec2-eapRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:7.0.9-2.GA_redhat_2.ep7.el7 | 0:7.0.9-2.GA_redhat_2.ep7.el7 |
eap7-jboss-ec2-eap-samplesRed Hat:jboss_enterprise_application_platform:7::el7 From an advisory covering 7 CVEs |
before 0:7.0.9-2.GA_redhat_2.ep7.el7 | 0:7.0.9-2.GA_redhat_2.ep7.el7 |
lucene-solrUbuntu:Pro:14.04:LTS |
before 3.6.2+dfsg-2ubuntu0.1~esm1, plus listed versions 3.6.2+dfsg-13.6.2+dfsg-2 |
3.6.2+dfsg-2ubuntu0.1~esm1 |
lucene-solrUbuntu:16.04:LTS |
before 3.6.2+dfsg-8ubuntu0.1, plus listed versions 3.6.2+dfsg-73.6.2+dfsg-8 |
3.6.2+dfsg-8ubuntu0.1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Apache Solr 7.0.1 - XML External Entity Expansion / Remote Code Execution | 2017-10-17 |
| PoC in GitHub | captain-woof/cve-2017-12629 | 2025-08-01 |
| PoC in GitHub | CyberCTF/vulhub-solr-cve-2017-12629-rce | 2026-10-08 |
| Nuclei | Apache Solr <= 7.1 - XML Entity Injection |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, exploits, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Nuclei, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-12629 is a critical vulnerability (CVSS 9.8) in Apache Solr, published October 14, 2017. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 91.9%, the 99th percentile. Fixed in org.apache.solr:solr-core 7.1.0.
References
access.redhat.com/errata/RHSA-2017:3451
s.apache.org/FJDl
securityfocus.com/bid/101261
Show 78 moreShow less
lists.debian.org/debian-lts-announce/2018/01/msg00028.html
exploit-db.com/exploits/43009
mail-archives.us.apache.org/mod_mbox/www-announce/201710.mbox/%3CCAOOKt51UO_6Vy%3Dj8W%3Dx1pMbLW9VJfZyFWz7pAnXJC_OAdSZubA%40mail.gmail.com%3E
debian.org/security/2018/dsa-4124
usn.ubuntu.com/4259-1
twitter.com/ApacheSolr/status/918731485611401216
openwall.com/lists/oss-security/2017/10/13/1
lists.apache.org/thread.html/r95df34bb158375948da82b4dfe9a1b5d528572d586584162f8f5aeef%40%3Cusers.solr.apache.org%3E
nvd.nist.gov/vuln/detail/CVE-2017-12629
github.com/advisories/GHSA-mh7g-99w9-xpjm
issues.apache.org/jira/browse/SOLR-11477
security-tracker.debian.org/tracker/CVE-2017-12629
advisories.mageia.org/MGASA-2017-0403.html
bugs.mageia.org/show_bug.cgi?id=21976
lists.fedoraproject.org/archives/list/[email protected]/thread/GTE5P6CWLVBPWNLR3RMLZGEFUYCZZR5V
bugzilla.redhat.com/show_bug.cgi?id=1501529
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_3123.json
cve.org/CVERecord?id=CVE-2017-12629
issues.redhat.com/browse/JBEAP-12349
ubuntu.com/security/CVE-2017-12629
mail-archives.apache.org/mod_mbox/lucene-dev/201710.mbox/%3CCAKrJsP=twErMhzf+FtUMOpCk7+[email protected]%3E