Login Request a demo
AS
Product
Apache Solr
by Apache Software Foundation · last CVE Jun 1, 2026
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 3High 4Medium 2Low 0
Severity
All severities9Critical3High4Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Apache Solr to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-44825
9.8
4%
Jun 1
Apache Solr: Enabling BasicAuth using bin/solr CLI configures additional insecure users
Affected: 9.4.0 through 9.10.1; 10.0.0
CVE-2024-45216
9.8
93%
Oct 16
Apache Solr: Authentication bypass possible using a fake URL Path ending
Affected: 5.3.0 before 8.11.4; 9.0.0 before 9.7.0
CVE-2019-0192
9.8
78%
Mar 7
In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request
Affected: Apache Solr 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5
CVE-2026-22022
8.2
1%
Jan 21
Apache Solr: Unauthorized bypass of certain "predefined permission" rules in the RuleBasedAuthorizationPlugin
Affected: 5.3 through 9.10.0
CVE-2024-45217
8.1
1%
Oct 16
Apache Solr: ConfigSets created during a backup restore command are trusted implicitly
Affected: 6.6.0 before 8.11.4; 9.0.0 before 9.7.0
CVE-2017-3164
7.5
19%
Mar 8
Server Side Request Forgery in Apache Solr, versions 1.3 until 7.6 (inclusive)
Affected: Apache Solr 1.3.0 to 1.4.1, 3.1.0 to 3.6.2, 4.0.0 to 4.10.4, 5.0.0 to 5.5.5, 6.0.0 to 6.6.5, 7.0.0 to 7.6.0
CVE-2026-22444
7.1
1%
Jan 21
Apache Solr: Insufficient file-access checking in standalone core-creation requests
Affected: 8.6 through 9.10.0
CVE-2025-24814
5.5
1%
Jan 27
Apache Solr: Core-creation with "trusted" configset can use arbitrary untrusted files
Affected: through 9.7
CVE-2024-52012
5.4
41%
Jan 27
Apache Solr: Configset upload on Windows allows arbitrary path write-access
Affected: 6.6 through 9.7.0
Showing 9