Fixed CVEs

Addressed Apache Tika vulnerability CVE-2025-66516, a critical XXE (XML External Entity) issue affecting the following modules:

  • tika-core versions 1.13–3.2.1
  • tika-pdf-module versions 2.0.0–3.2.1
  • tika-parsers versions 1.13–1.28.5

This vulnerability affects all platforms and allows an attacker to perform XML External Entity (XXE) injection through a crafted XFA file embedded in a PDF. Upgraded Solr version to 8.11.2.1 in Ambari Infra Solr to resolve this vulnerability.

VariableType to search · ESC to discard
GlossaryType to search · ESC to discard
InsertType to search · ESC to discard
No matches
  Last updated
On This Page
Fixed CVEs