Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistApacheCVELIST:CVE-2019-0192
HistoryMar 07, 2019 - 9:00 p.m.

CVE-2019-0192

2019-03-0721:00:00
apache
www.cve.org
6

AI Score

9.8

Confidence

High

EPSS

0.948

Percentile

99.3%

JSON

In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request. By pointing it to a malicious RMI server, an attacker could take advantage of Solr’s unsafe deserialization to trigger remote code execution on the Solr side.

CNA Affected

[
  {
    "product": "Apache Solr",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "Apache Solr 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5"
      }
    ]
  }
]

References

Related

ibm 3
redhatcve 1
nessus 3
checkpoint_advisories 1
osv 2
debiancve 1
veracode 1
ubuntucve 1
nvd 1
github 1
prion 1
githubexploit 1
cve 1
hackerone 1
thn 1
redhat 1
oracle 2
ibm
ibm
Security Bulletin: A vulnerability in Apache Solr affects IBM InfoSphere Information Server
2019-06-27 23:45:01
Security Bulletin: Potential vulnerability related to Unsafe Deserialization in Apache Solr shipped with IBM Operations Analytics - Log Analysis (CVE-2019-0192)
2019-04-23 04:50:01
Log Analysis Security Bulletin List
2021-09-01 11:04:11
redhatcve
redhatcve
CVE-2019-0192
2019-10-10 17:40:21
nessus
nessus
Apache Solr 5.x <= 5.5.5 or 6.x <= 6.6.5 Deserialization Vulnerability (CVE-2019-0192)
2019-07-03 00:00:00
Apache Solr 5.x <= 5.5.5 or 6.x <= 6.6.5 Deserialization Vulnerability
2019-03-27 00:00:00
Oracle Primavera Unifier Multiple Vulnerabilities (Jul 2019 CPU)
2019-07-19 00:00:00
checkpoint_advisories
checkpoint_advisories
Apache Solr Config API Insecure Deserialization Remote Code Execution (CVE-2019-0192)
2019-04-03 00:00:00
osv
osv
CVE-2019-0192
2019-03-07 21:29:00
Critical severity vulnerability that affects org.apache.solr:solr-core
2019-03-14 15:39:45
debiancve
debiancve
CVE-2019-0192
2019-03-07 21:29:00
veracode
veracode
Remote Code Execution (RCE)
2019-03-08 03:28:52
ubuntucve
ubuntucve
CVE-2019-0192
2019-03-07 00:00:00
nvd
nvd
CVE-2019-0192
2019-03-07 21:29:00
github
github
Critical severity vulnerability that affects org.apache.solr:solr-core
2019-03-14 15:39:45
prion
prion
Remote code execution
2019-03-07 21:29:00
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Apache Solr
2019-11-01 13:46:37
cve
cve
CVE-2019-0192
2019-03-07 21:29:00
hackerone
hackerone
U.S. Dept Of Defense: Remote Code Execution on █████████
2020-08-19 04:07:49
thn
thn
Linux Botnet Adding BlueKeep-Flawed Windows RDP Servers to Its Target List
2019-07-25 09:38:00
redhat
redhat
(RHSA-2019:2413) Important: Red Hat Fuse 7.4.0 security update
2019-08-08 10:07:26
oracle
oracle
Oracle Critical Patch Update Advisory - July 2019
2019-07-16 00:00:00
Oracle Critical Patch Update Advisory - October 2020
2020-10-20 00:00:00

AI Score

9.8

Confidence

High

EPSS

0.948

Percentile

99.3%

JSON
Related for CVELIST:CVE-2019-0192
ibm3redhatcve1nessus3checkpoint_advisories1osv2debiancve1veracode1ubuntucve1nvd1github1prion1githubexploit1cve1hackerone1thn1redhat1oracle2