SO
Product
Solr
On CISA KEVExploited in the wild
46
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 19Medium 10Low 1
Watch
Add Solr to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-50290 | 6.5 | Jan 15 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr Affected: 9.0.0 before 9.3.0 |
| CVE-2015-8797 | 6.1 | Feb 15 | Cross-site scripting (XSS) vulnerability in webapp/web/js/scripts/plugins.js in the stats page in the Admin UI in Apache Solr before 5.3.1 allows remote attackers to inject… Affected: through 5.3 |
| CVE-2015-8796 | 6.1 | Feb 15 | Cross-site scripting (XSS) vulnerability in webapp/web/js/scripts/schema-browser.js in the Admin UI in Apache Solr before 5.3 allows remote attackers to inject arbitrary web… Affected: through 5.2.1 |
| CVE-2015-8795 | 6.1 | Feb 15 | Multiple cross-site scripting (XSS) vulnerabilities in the Admin UI in Apache Solr before 5.1 allow remote attackers to inject arbitrary web script or HTML via crafted fields that… Affected: through 5.0 |
| CVE-2025-24814 | 5.5 | Jan 27 | Core creation allows users to replace "trusted" configset files with arbitrary configuration Solr instances that (1) use the "FileSystemConfigSetService" component (the default… Affected: before 9.8.0 |
| CVE-2018-8026 | 5.5 | Jul 5 | This vulnerability in Apache Solr 6.0.0 to 6.6.4 and 7.0.0 to 7.3.1 relates to an XML external entity expansion (XXE) in Solr config files (currency.xml, enumsConfig.xml referred… Affected: after 6.0.0 through 6.6.4; 7.0.0 through 7.3.1 |
| CVE-2018-8010 | 5.5 | May 21 | This vulnerability in Apache Solr 6.0.0 to 6.6.3, 7.0.0 to 7.3.0 relates to an XML external entity expansion (XXE) in Solr config files (solrconfig.xml, schema.xml,… Affected: 6.0.0 through 6.6.3; 7.0.0 through 7.3.0 |
| CVE-2024-52012 | 5.4 | Jan 27 | Relative Path Traversal vulnerability in Apache Solr Affected: 6.6.0 before 9.8.0 |
| CVE-2020-27223 | 5.3 | Feb 26 | In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of… Affected: 8.8.1 |
| CVE-2018-11802 | 4.3 | Apr 1 | In Apache Solr, the cluster can be partitioned into multiple collections and only a subset of nodes actually host any given collection Affected: 4.2.0 before 6.6.6; 7.0.0 before 7.7.0 |
Showing 10