CVE-2013-6408: The DocumentAnalysisRequestHandler in Apache Solr before 4.3.1 does not properly use the EmptyEntityResolve...

Security readout for executives and security teams

CVE-2013-6408 is an XML External Entity issue in Apache Solr before 4.3.1. A remote attacker could send XML with external entity declarations to the DocumentAnalysisRequestHandler, but the public record does not define the exact business impact. Exposure is most likely where Apache Solr before 4.3.1 is deployed and the DocumentAnalysisRequestHandler can receive XML from untrusted users or networks. The source bundle does not identify affected downstream products beyond vendor advisories. Prioritize identification and upgrade of old Solr instances, especially internet-facing or user-reachable deployments. Business urgency is hard to score because impact is unspecified, but the weakness class can affect confidentiality or server-side behavior in XML parsers. Mitigation focus: Upgrade Apache Solr to 4.3.1 or a vendor-supported fixed package.; Review Red Hat advisories if using vendor-packaged Solr components.; Restrict untrusted access to Solr request handlers until fixed..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.