AS
Product
Apache Solr
by Apache Software Foundation · last CVE Jun 1, 2026
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 4Medium 2Low 0
Watch

Add Apache Solr to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-22022
8.2
1%
Jan 21
Apache Solr: Unauthorized bypass of certain "predefined permission" rules in the RuleBasedAuthorizationPlugin
Affected: 5.3 through 9.10.0
CVE-2024-45217
8.1
1%
Oct 16
Apache Solr: ConfigSets created during a backup restore command are trusted implicitly
Affected: 6.6.0 before 8.11.4; 9.0.0 before 9.7.0
CVE-2017-3164
7.5
19%
Mar 8
Server Side Request Forgery in Apache Solr, versions 1.3 until 7.6 (inclusive)
Affected: Apache Solr 1.3.0 to 1.4.1, 3.1.0 to 3.6.2, 4.0.0 to 4.10.4, 5.0.0 to 5.5.5, 6.0.0 to 6.6.5, 7.0.0 to 7.6.0
CVE-2026-22444
7.1
1%
Jan 21
Apache Solr: Insufficient file-access checking in standalone core-creation requests
Affected: 8.6 through 9.10.0
Showing 4