Known vulnerabilities in Apache Solr - page 2
Vendor:
Apache Foundation
Software:
Apache Solr
Software CPE:
cpe:2.3:a:apache_foundation:apache_solr:*:*:*:*:*:*:*:*
Website:
https://www.apache.org
Total vulnerabilities:
26
Public exploits:
8
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
10.1.0
9.11.0
10.0.0
9.10.1
9.10.0
9.9.0
9.8.1
9.8.0
9.7.0
9.6.1
9.6.0
9.5.0
1.2.0
8.11.4
9.4.1
8.11.3
9.4.0
9.3.0
9.2.1
9.2.0
9.1.1
9.1.0
9.0.0
8.1.2
6.1.3
1.1.0
8.11.2
8.11.1
8.11.0
8.10.1
8.10.0
8.9.0
8.8.2
8.8.1
8.8.0
8.7.0
8.6.3
8.6.2
8.6.1
8.6.0
8.5.2
7.7.3
8.5.1
8.5.0
8.4.1
8.4.0
8.3.1
8.3.0
8.2.0
8.1.1
8.1.0
8.0.0
7.7.2
7.7.1
7.7.0
7.6.0
7.5.0
7.4.0
7.2.0
7.1.0
6.6.6
6.6.5
6.6.0
6.5.0
6.4.0
6.3.0
6.2.1
6.2.0
6.1.0
6.0.0
5.5.0
5.4.0
5.3.0
5.2.1
5.2.0
5.1.0
4.10.0
4.9.0
4.8.0
4.7.0
4.6.1
4.6.0
4.5.1
4.5.0
4.4.0
4.3.1
4.2.0
4.1.0
4.0.0
3.6.0
3.5.0
3.4.0
3.3.0
3.2.0
3.1.0
1.4.1
1.4.0
1.3.0
1.1
7.3.1
6.6.4
7.3.0
6.6.3
7.2.1
7.2
7.1
7.0.1
6.6.2
6.6.1
6.6
6.5.1
6.5
6.4.2
6.4.1
6.4
6.3
6.2
6.1
6.0.1
6.0
5.5.5
5.5.4
5.5.3
5.5.2
5.5.1
5.5
5.4.1
5.4
5.3.2
5.3.1
5.3
5.2
5.1
4.10.4
4.10.3
4.10.2
4.10.1
4.10
4.9.1
4.9
4.8.1
4.8
4.7.2
4.7.1
4.7
4.6
4.5
4.4
4.3
3.6.2
3.6.1
3.6
3.5
3.4
3.3
3.2
1.2
7.0.0
5.0.0
4.3.0
4.2.1
4.2
4.1
4.0
3.1
1.4
1.3
Vulnerabilities (26)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU22878 - Improper Authentication CVE-2019-12409 |
CWE-287 | High | 8.3.0 | 21.11.2019 |
SB2019112102 |
||
| #VU20062 - Exposed Dangerous Method or Function CVE-2019-0193 |
CWE-749 | Medium | 8.2.0 | 13.08.2019 |
SB2019081214 SB2025022107 |
||
| #VU19391 - Deserialization of Untrusted Data CVE-2019-0192 |
CWE-502 | High | 6.6.6 | 26.07.2019 |
SB2019030611 SB2019080913 SB2020102108 and 1 more |
||
| #VU13012 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2018-8010 |
CWE-611 | Low | - | 24.05.2018 |
SB2018052405 |
||
| #VU11780 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2018-1308 |
CWE-611 | Low | - | 12.04.2018 |
SB2018041210 SB2018050701 |
||
| #VU10219 - Command injection CVE-2017-12629 |
CWE-77 | High | 5.5.5, 6.6.2, 7.1.0 | 24.01.2018 |
SB2017101213 SB2018022813 SB2017110605 and 11 more |
Showing elements 21 - 40 out of 26