Security
فارسی
All products

org.apache.solr:solr-core

Maven · Package
31 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Apache Solr has hardcoded credentials in the Basic Authentication setup toolCVE-2026-44825 · GHSA-QHR7-H655-PW6R org.apache.solr:solr-core Maven High No fix reported
Server-Side Request Forgery (SSRF) in org.apache.solr:solr-coreCVE-2017-3164 · GHSA-VRH8-27Q8-FR8F org.apache.solr:solr-core Maven High Fix reported
Apache Solr: Insufficient file-access checking in standalone core-creation requestsCVE-2026-22444 · GHSA-VC2W-4V3P-2MQW org.apache.solr:solr-coreRed Hat Fuse 7/solr-core MavenRed Hat High Fix reported
Apache Solr: Unauthorized bypass of certain "predefined permission" rules in the RuleBasedAuthorizationPluginCVE-2026-22022 · GHSA-QR3P-2XJ2-Q7HQ org.apache.solr:solr-coreRed Hat Fuse 7/solr-core MavenRed Hat High Fix reported
Incorrect Authorization in Apache SolrCVE-2018-11802 · GHSA-J346-H5WC-RW2M org.apache.solr:solr-coreorg.apache.solr:solr-parent MavenRed Hat Medium Fix reported
XML External Entity (XXE) Injection in Apache SolrCVE-2019-0193 · GHSA-3GM7-V7VW-866C org.apache.solr:solr-coreRed Hat JBoss Fuse Service Works 6/solr-core MavenRed Hat High Fix reported
Improper Input Validation in Apache SolrCVE-2019-17558 · GHSA-WW97-9W65-2CRX org.apache.solr:solr-core Maven High Fix reported
Incorrect Authorization in Apache SolrCVE-2020-13957 · GHSA-3C7P-VV5R-CMR5 org.apache.solr:solr-coreorg.apache.solr:solr-parent Maven Critical Fix reported
Apache Solr vulnerable to Execution with Unnecessary PrivilegesCVE-2025-24814 · GHSA-68R2-FWCG-QPM8 org.apache.solr:solr-coreRed Hat Fuse 7/solr-core MavenRed Hat High Fix reported
Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets CVE-2023-50386 · GHSA-37VR-VMG4-JWPW org.apache.solr:solr-core Maven High Fix reported
Apache Solr can leak certain passwords due to System Property redaction logic inconsistenciesCVE-2023-50291 · GHSA-3HWC-RQWP-V36Q org.apache.solr:solr-coreRed Hat Fuse 7/solr MavenRed Hat High Fix reported
Apache Solr Relative Path Traversal vulnerabilityCVE-2024-52012 · GHSA-4P5M-GVPF-F3X5 org.apache.solr:solr-core Maven Medium Fix reported
Improper Restriction of XML External Entity Reference in Apache SolrCVE-2012-6612 · GHSA-6CPJ-3G83-Q2J4 org.apache.solr:solr-core Maven High Fix reported
Improper Limitation of a Pathname to a Restricted Directory in Apache SolrCVE-2013-6397 · GHSA-J8QW-MWMV-28CG org.apache.solr:solr-coreRed Hat JBoss Data Grid 6/solr MavenRed Hat Medium Fix reported
Apache Solr UpdateRequestHandler for XML resolves XML External EntitiesCVE-2013-6407 · GHSA-998J-J6V9-5846 org.apache.solr:solr-core Maven Medium Fix reported
XML Injection in Apache SolrCVE-2013-6408 · GHSA-45W3-2HVV-PFXQ org.apache.solr:solr-core Maven Medium Fix reported
Remote code execution occurs in Apache SolrCVE-2017-12629 · GHSA-MH7G-99W9-XPJM org.apache.solr:solr-coreRed Hat Enterprise Linux 6/lucene MavenRed Hat Critical Fix reported
XML external entity expansion in org.apache.solr:solr-coreCVE-2018-8026 · GHSA-7PX3-6F6G-HXCJ org.apache.solr:solr-core Maven Medium Fix reported
There is a XML external entity expansion (XXE) vulnerability in Apache Solr config filesCVE-2018-8010 · GHSA-RC9V-H28F-JCMF org.apache.solr:solr-coreJBoss Developer Studio 11/solr-core MavenRed Hat Medium Fix reported
There is a XML external entity expansion (XXE) vulnerability in Apache Solr CVE-2018-1308 · GHSA-3PPH-2595-CGFH org.apache.solr:solr-core Maven High Fix reported