Fixed CVEs

Addressed Apache Tika vulnerability CVE-2025-66516, a critical XXE (XML External Entity) issue affecting the following modules:

  • tika-core versions 1.13–3.2.1
  • tika-pdf-module versions 2.0.0–3.2.1
  • tika-parsers versions 1.13–1.28.5

This vulnerability affects all platforms and allows an attacker to perform XML External Entity (XXE) injection through a crafted XFA file embedded in a PDF. Upgraded Solr version to 8.11.2.1 in Ambari Infra Solr to resolve this vulnerability.

Type to search, ESC to discard
Type to search, ESC to discard
Type to search, ESC to discard
  Last updated
On This Page
Fixed CVEs