Login Request a demo
AS
Product
Apache Solr
by Apache Software Foundation · last CVE Jun 1, 2026
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 2High 1Medium 0Low 0
Severity
All severities3Critical2High1Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Apache Solr to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-44825
9.8
4%
Jun 1
Apache Solr: Enabling BasicAuth using bin/solr CLI configures additional insecure users
Affected: 9.4.0 through 9.10.1; 10.0.0
CVE-2019-0192
9.8
78%
Mar 7
In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request
Affected: Apache Solr 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5
CVE-2017-3164
7.5
19%
Mar 8
Server Side Request Forgery in Apache Solr, versions 1.3 until 7.6 (inclusive)
Affected: Apache Solr 1.3.0 to 1.4.1, 3.1.0 to 3.6.2, 4.0.0 to 4.10.4, 5.0.0 to 5.5.5, 6.0.0 to 6.6.5, 7.0.0 to 7.6.0
Showing 3