This host is installed with Apache Solr and is prone to xml external entity vulnerability.

Successful exploitation will allow remote attackers to gain potentially sensitive information and potentially perform other more advanced XXE attacks. Impact Level: Application

Upgrade to Apache Solr version 4.3.1 or later. For updates refer to http://lucene.apache.org/solr

The flaw is due to error in 'DocumentAnalysisRequestHandler' when parsing XML entities.

Apache Solr before version 4.3.1

Get the installed version with the help of detect NVT and check the version is vulnerable or not.

• http://osvdb.org/100396
• http://secunia.com/advisories/55542
• http://www.openwall.com/lists/oss-security/2013/11/29/2

---

Updated on 2015-03-25