{
  "@id": "urn:uuid:cd08318c-d6e0-41c2-b6fe-82fae188aec1",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 3,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-13T09:58:51.496385+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.solr/solr-parent@7.7.2-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.solr/solr-parent@7.7.2-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-11-11T18:29:22.818209+00:00",
      "status_notes": "Vulnerability CVE-2018-11802 does not affect version 7.7.2-tuxcare.1 of org.apache.solr:solr-parent. not_affected \u2014 CVE-2018-11802 (SOLR-12514): The target Apache Solr 7.7.2 is NOT AFFECTED. The vulnerability (authorization bypass during request proxying to nodes without collection replicas) was fixed upstream by Noble Paul in commit e085fcd3f5952018e6bf465e4a6274b560bdee22 (Jan 5, 2019), which was already included in the Apache Solr 7.7.2 release before TuxCare onboarded it. All fix components are present: ...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2018-11802"
      },
      "impact_statement": "not_affected \u2014 CVE-2018-11802 (SOLR-12514): The target Apache Solr 7.7.2 is NOT AFFECTED. The vulnerability (authorization bypass during request proxying to nodes without collection replicas) was fixed upstream by Noble Paul in commit e085fcd3f5952018e6bf465e4a6274b560bdee22 (Jan 5, 2019), which was already included in the Apache Solr 7.7.2 release before TuxCare onboarded it. All fix components are present: ..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.solr/solr-parent@7.7.2-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.solr/solr-parent@7.7.2-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-11-11T18:29:22.818209+00:00",
      "status_notes": "Vulnerability CVE-2020-13941 affects version 7.7.2-tuxcare.1 of org.apache.solr:solr-parent.",
      "vulnerability": {
        "name": "CVE-2020-13941"
      },
      "action_statement": "Vulnerability CVE-2020-13941 affects version 7.7.2-tuxcare.1 of org.apache.solr:solr-parent."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.solr/solr-parent@7.7.2-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.solr/solr-parent@7.7.2-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-11-11T18:30:26.330698+00:00",
      "status_notes": "Vulnerability CVE-2020-13957 is fixed in version 7.7.2-tuxcare.1 of org.apache.solr:solr-parent.",
      "vulnerability": {
        "name": "CVE-2020-13957"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.solr/solr-parent@7.7.2-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.solr/solr-parent@7.7.2-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-11-11T18:29:22.818209+00:00",
      "status_notes": "Vulnerability CVE-2021-27905 affects version 7.7.2-tuxcare.1 of org.apache.solr:solr-parent.",
      "vulnerability": {
        "name": "CVE-2021-27905"
      },
      "action_statement": "Vulnerability CVE-2021-27905 affects version 7.7.2-tuxcare.1 of org.apache.solr:solr-parent."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.solr/solr-parent@7.7.2-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.solr/solr-parent@7.7.2-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-11-13T09:58:51.496385+00:00",
      "status_notes": "Vulnerability CVE-2021-29943 affects version 7.7.2-tuxcare.1 of org.apache.solr:solr-parent, and is fixed in 7.7.2-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2021-29943"
      },
      "action_statement": "Vulnerability CVE-2021-29943 affects version 7.7.2-tuxcare.1 of org.apache.solr:solr-parent, and is fixed in 7.7.2-tuxcare.2."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.solr/solr-parent@7.7.2-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.solr/solr-parent@7.7.2-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-11-11T18:30:26.330698+00:00",
      "status_notes": "Vulnerability CVE-2021-44548 is fixed in version 7.7.2-tuxcare.1 of org.apache.solr:solr-parent.",
      "vulnerability": {
        "name": "CVE-2021-44548"
      }
    }
  ]
}