Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Solr

24 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-45216 Public exploit EPSS 93%

    Apache Solr: Authentication bypass possible using a fake URL Path ending

    Improper Authentication vulnerability in Apache Solr. Solr instances using the PKIAuthenticationPlugin, which is enabled by default when Solr Authentication is used, are vulnerable to Authentication bypass. A fake ending at the end of any Solr API URL path, w…

    Apache Software Foundation Apache Solr lucene-solr org.apache.solr:solr Ubuntu Maven
  • Critical 9.8
    CVE-2019-0192 Public exploit EPSS 78%

    Critical severity vulnerability that affects org.apache.solr:solr-core

    In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request. By pointing it to a malicious RMI server, an attacker could take advantage of Solr's unsafe deserialization to trigger remot…

    Apache Software Foundation Apache Solr org.apache.solr:solr-core lucene-solr Ubuntu Maven