Vulnetix
Try Vulnetix Request Demo
CVE-2019-0192 PUBLISHED

In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request. By pointing it to a malicious RMI server, an attacker could take advantage of Solr's unsafe deserialization to trigger remote code execution on the Solr side.

EPSS 93.55% · 99.8th percentile

Risk Scores

EPSS Score
93.55%
99.8th percentile

Affected Products

VendorProductVersions
Ubuntu:25.10lucene-solr0, 3.6.2+dfsg-26
Ubuntu:24.04:LTSlucene-solr3.6.2+dfsg-26, 0
Ubuntu:20.04:LTSlucene-solr3.6.2+dfsg-20, 3.6.2+dfsg-22, 0
Ubuntu:Pro:18.04:LTSlucene-solr3.6.2+dfsg-10, 0, 3.6.2+dfsg-11
Ubuntu:22.04:LTSlucene-solr0, 3.6.2+dfsg-24
Ubuntu:Pro:14.04:LTSlucene-solr3.6.2+dfsg-2, 3.6.2+dfsg-1, 3.6.2+dfsg-2ubuntu0.1~esm4
Ubuntu:Pro:16.04:LTSlucene-solr3.6.2+dfsg-7, 3.6.2+dfsg-8, 3.6.2+dfsg-8ubuntu0.1

Timeline

References

Open in Interactive Console →