| CVE-2026-44825 |
Hardcoded credentials in the Basic Authentication setup tool (bin/solr auth enable) in Apache Solr versions 9.4.0…
|
8.1
High
|
Jun 1, 2026 |
| CVE-2026-22022 |
Deployments of Apache Solr 5.3.0 through 9.10.0 that rely on Solr's "Rule Based Authorization Plugin" are vulnerable…
|
Not rated
|
Jan 21, 2026 |
| CVE-2026-22444 |
The "create core" API of Apache Solr 8.6 through 9.10.0 lacks sufficient input validation on some API parameters,…
|
Not rated
|
Jan 21, 2026 |
| CVE-2025-24814 |
Core creation allows users to replace "trusted" configset files with arbitrary configuration Solr instances that (1) use…
|
Not rated
|
Jan 27, 2025 |
| CVE-2024-52012 |
Relative Path Traversal vulnerability in Apache Solr
|
Not rated
|
Jan 27, 2025 |
| CVE-2024-45217 |
Insecure Default Initialization of Resource vulnerability in Apache Solr
|
Not rated
|
Oct 16, 2024 |
| CVE-2024-45216 |
Improper Authentication vulnerability in Apache Solr
|
Not rated
|
Oct 16, 2024 |
| CVE-2023-50291 |
Insufficiently Protected Credentials vulnerability in Apache Solr
|
Not rated
|
Feb 9, 2024 |
| CVE-2023-50292 |
Incorrect Permission Assignment for Critical Resource, Improper Control of Dynamically-Managed Code Resources…
|
Not rated
|
Feb 9, 2024 |
| CVE-2023-50298 |
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr.This issue affects Apache…
|
Not rated
|
Feb 9, 2024 |
| CVE-2023-50386 |
Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of…
|
Not rated
|
Feb 9, 2024 |
| CVE-2023-50290 |
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr
|
Not rated
|
Jan 15, 2024 |
| CVE-2021-44548 |
An Improper Input Validation vulnerability in DataImportHandler of Apache Solr allows an attacker to provide a Windows…
|
Not rated
|
Dec 23, 2021 |
| CVE-2021-29943 |
When using ConfigurableInternodeAuthHadoopPlugin for authentication, Apache Solr versions prior to 8.8.2 would…
|
Not rated
|
Apr 13, 2021 |
| CVE-2021-29262 |
When starting Apache Solr versions prior to 8.8.2, configured with the SaslZkACLProvider or…
|
Not rated
|
Apr 13, 2021 |
| CVE-2021-27905 |
The ReplicationHandler (normally registered at "/replication" under a Solr core) in Apache Solr has a "masterUrl"…
|
Not rated
|
Apr 13, 2021 |
| CVE-2017-3164 |
Server Side Request Forgery in Apache Solr, versions 1.3 until 7.6 (inclusive)
|
Not rated
|
Mar 8, 2019 |
| CVE-2019-0192 |
In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP…
|
Not rated
|
Mar 7, 2019 |
| CVE-2018-8026 |
This vulnerability in Apache Solr 6.0.0 to 6.6.4 and 7.0.0 to 7.3.1 relates to an XML external entity expansion (XXE) in…
|
Not rated
|
Jul 5, 2018 |
| CVE-2018-8010 |
This vulnerability in Apache Solr 6.0.0 to 6.6.3, 7.0.0 to 7.3.0 relates to an XML external entity expansion (XXE) in…
|
Not rated
|
May 21, 2018 |
| CVE-2018-1308 |
This vulnerability in Apache Solr 1.2 to 6.6.2 and 7.0.0 to 7.2.1 relates to an XML external entity expansion (XXE) in…
|
Not rated
|
Apr 9, 2018 |
| CVE-2017-9803 |
Apache Solr's Kerberos plugin can be configured to use delegation tokens, which allows an application to reuse the…
|
Not rated
|
Sep 18, 2017 |
| CVE-2017-3163 |
When using the Index Replication feature, Apache Solr nodes can pull index files from a master/leader node using an HTTP…
|
Not rated
|
Aug 30, 2017 |
| CVE-2017-7660 |
Apache Solr uses a PKI based mechanism to secure inter-node communication when security is enabled
|
Not rated
|
Jul 7, 2017 |