CVE-2015-8795

6.1 mediumEPSS 2.7%

Multiple cross-site scripting (XSS) vulnerabilities in the Admin UI in Apache Solr before 5.1 allow remote attackers to inject arbitrary web script or HTML via crafted fields that are mishandled during the rendering of the (1) Analysis page, related to webapp/web/js/scripts/analysis.js or (2) Schema-Browser page, related to webapp/web/js/scripts/schema-browser.js.

Severity

CVSS 3.0

6.1 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 2.7% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2016-02-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apache:solr

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-mx2h-hf7j-2x3p	Maven	org.apache.solr:solr-core	<5.1.0	5.1.0

References

https://issues.apache.org/jira/browse/SOLR-7346
https://issues.apache.org/jira/browse/SOLR-7346

Check your stack JSON