{
  "@id": "urn:uuid:45ab91c4-92d3-4bd0-8657-fe29b977edc1",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 3,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-09T06:48:00.070205+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.lucene/lucene-queryparser@5.5.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.lucene/lucene-queryparser@5.5.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-11-09T06:48:00.070205+00:00",
      "status_notes": "Vulnerability CVE-2019-12409 does not affect version 5.5.5-tuxcare.1 of org.apache.lucene:lucene-queryparser. Not affected: CVE-2019-12409 affects only Solr 8.1.1 and 8.2.0 for Linux, whose default solr.in.sh set ENABLE_REMOTE_JMX_OPTS=\"true\". Solr 5.5.5 ships ENABLE_REMOTE_JMX_OPTS=\"false\", and bin/solr enables remote JMX only when the value is \"true\". No backport required. Backporter MR https://cs-gitlab.atm.svcs.io/scels/lucene-81/-/merge_requests/15 closed without merge.",
      "vulnerability": {
        "name": "CVE-2019-12409"
      },
      "impact_statement": "Not affected: CVE-2019-12409 affects only Solr 8.1.1 and 8.2.0 for Linux, whose default solr.in.sh set ENABLE_REMOTE_JMX_OPTS=\"true\". Solr 5.5.5 ships ENABLE_REMOTE_JMX_OPTS=\"false\", and bin/solr enables remote JMX only when the value is \"true\". No backport required. Backporter MR https://cs-gitlab.atm.svcs.io/scels/lucene-81/-/merge_requests/15 closed without merge."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.lucene/lucene-queryparser@5.5.5-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.lucene/lucene-queryparser@5.5.5-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2020-13941 affects version 5.5.5-tuxcare.1 of org.apache.lucene:lucene-queryparser.",
      "vulnerability": {
        "name": "CVE-2020-13941"
      },
      "action_statement": "Vulnerability CVE-2020-13941 affects version 5.5.5-tuxcare.1 of org.apache.lucene:lucene-queryparser."
    }
  ]
}