CVE-2017-1000190: Apache Solr

Critical severity, CVSS 9.1. EPSS: 4.7% chance of exploitation in the next 30 days.

SimpleXML (latest version 2.7.1) is vulnerable to an XXE vulnerability resulting SSRF, information disclosure, DoS and so on.

Affected products

• Apache Solr: version 8.4.1 only
• Simplexml Project Simplexml: up to and including 2.7.1

Published 2017-11-17. Last modified 2026-06-17.