Apache Software Foundation Apache Solr

• CVE-2026-44825 High 8.1 Apache Solr: Enabling BasicAuth using bin/solr CLI configures additional insecure users 3.9%
• CVE-2026-22022 High 8.2 Apache Solr: Unauthorized bypass of certain "predefined permission" rules in the RuleBasedAuthorizationPlugin 0.6%
• CVE-2026-22444 High 7.1 Apache Solr: Insufficient file-access checking in standalone core-creation requests 0.7%
• CVE-2025-24814 Medium 5.4 Apache Solr: Core-creation with "trusted" configset can use arbitrary untrusted files 1.2%
• CVE-2024-52012 Medium 5.4 Apache Solr: Configset upload on Windows allows arbitrary path write-access 47.1%
• CVE-2024-45217 High 8.1 Apache Solr: ConfigSets created during a backup restore command are trusted implicitly 0.7%
• CVE-2024-45216 Critical 9.8 Apache Solr: Authentication bypass possible using a fake URL Path ending 92.7%
• CVE-2023-50291 High 7.5 Apache Solr: System Property redaction logic inconsistency can lead to leaked passwords 3.3%
• CVE-2023-50292 High 7.5 Apache Solr: Solr Schema Designer blindly "trusts" all configsets, possibly leading to RCE by unauthenticated users 3.0%
• CVE-2023-50298 High 7.5 Apache Solr: Solr can expose ZooKeeper credentials via Streaming Expressions 1.6%
• CVE-2023-50386 High 8.8 Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets 83.7%
• CVE-2023-50290 Medium 6.5 Apache Solr: Host environment variables are published via the Metrics API 68.4%
• CVE-2021-44548 Unrated Apache Solr information disclosure vulnerability through DataImportHandler 5.2%
• CVE-2021-29943 Unrated Apache Solr Unprivileged users may be able to perform unauthorized read/write to collections 4.7%
• CVE-2021-29262 Unrated Misapplied Zookeeper ACLs can result in leakage of configured authentication and authorization settings 6.7%
• CVE-2021-27905 Unrated SSRF vulnerability with the Replication handler 93.1%