Apache Log4j2 <=2.14.1 JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. This vulnerability affects Solr 7+.
id: apache-solr-log4j-rce
info:
name: Apache Solr 7+ - Remote Code Execution (Apache Log4j)
aut
...