Known vulnerabilities in Apache Solr

Software: Apache Solr
Software CPE: cpe:2.3:a:apache_foundation:apache_solr:*:*:*:*:*:*:*:*
Total vulnerabilities: 26
Public exploits: 8
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache Solr Apache Solr is affected by 26 known vulnerabilities: 1 critical, 7 high, 13 medium, 5 low Critical High Medium Low

Vulnerabilities (26)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU133400 - Use of Hard-coded Credentials
CVE-2026-44825
CWE-798 High
No
No
9.11.0, 10.1.0 04.06.2026 SB20260604102
SB2026061737
#VU121931 - Improper Authorization
CVE-2026-22022
CWE-285 Low
No
No
9.10.1 22.01.2026 SB2026012211
SB2026042288
SB2026061737
#VU121930 - Permissions, Privileges, and Access Controls
CVE-2026-22444
CWE-264 Medium
No
No
9.10.1 22.01.2026 SB2026012211
SB2026061737
#VU103325 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-52012
CWE-22 Medium
No
No
9.8.0 27.01.2025 SB2025012737
SB2025041544
SB2026022019
#VU103324 - Permissions, Privileges, and Access Controls
CVE-2025-24814
CWE-264 Low
No
No
9.8.0 27.01.2025 SB2025012737
SB2025041544
SB2025071613
and 1 more
#VU98527 - Insufficient Verification of Data Authenticity
CVE-2024-45217
CWE-345 Medium
No
No
8.11.4, 9.7.0 15.10.2024 SB2024101504
SB2024121856
SB2025021263
and 1 more
#VU98526 - Improper Authentication
CVE-2024-45216
CWE-287 Medium
Available
No
8.11.4, 9.7.0 15.10.2024 SB2024101504
SB2024121856
SB2025021263
and 1 more
#VU86635 - Unrestricted Upload of File with Dangerous Type
CVE-2023-50386
CWE-434 Medium
Available
No
8.11.2, 9.4.1 20.02.2024 SB2024022041
SB2024041019
SB2024041643
and 3 more
#VU86633 - Incorrect Permission Assignment for Critical Resource
CVE-2023-50292
CWE-732 High
No
No
8.11.2, 9.3.0 20.02.2024 SB2024022039
SB2024041019
SB2024082816
and 1 more
#VU86632 - Insufficiently Protected Credentials
CVE-2023-50291
CWE-522 Low
No
No
8.11.2, 9.3.0 20.02.2024 SB2024022039
SB2024041019
SB2024082816
and 1 more
#VU86631 - Exposure of sensitive information to an unauthorized actor
CVE-2023-50298
CWE-200 Medium
No
No
8.11.3, 9.4.1 20.02.2024 SB2024022040
SB2024041019
SB2024082816
and 2 more
#VU85351 - Exposure of sensitive information to an unauthorized actor
CVE-2023-50290
CWE-200 Medium
No
No
9.3.0 14.01.2024 SB2024011424
SB2024031814
SB2024061883
#VU69467 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-39135
CWE-611 High
No
No
8.11.2 21.11.2022 SB2022112141
SB2022112142
SB2023040701
and 4 more
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228
CWE-94 Critical
Available
Exploited
8.11.1 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more
#VU52062 - Improper Access Control
CVE-2021-29262
CWE-284 Medium
No
No
8.8.2 13.04.2021 SB2021041303
#VU52061 - Improper Authorization
CVE-2021-29943
CWE-285 Medium
No
No
8.8.2 13.04.2021 SB2021041303
#VU52060 - Server-Side Request Forgery (SSRF)
CVE-2021-27905
CWE-918 Medium
Available
No
8.8.2 13.04.2021 SB2021041303
#VU47626 - Protection Mechanism Failure
CVE-2020-13957
CWE-693 High
Available
No
8.6.3 13.10.2020 SB2020101401
SB2024092654
#VU45762 - Improper input validation
CVE-2020-13941
CWE-20 Medium
No
No
8.6.0 19.08.2020 SB2020081902
#VU23850 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-17558
CWE-94 Medium
Available
Exploited
8.4.0 30.12.2019 SB2019123002
SB2020102845


Showing elements 1 - 20 out of 26