CVE-2021-33813: Apache Solr

High severity, CVSS 7.5. EPSS: 19.4% chance of exploitation in the next 30 days.

An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request.

Affected products

• Apache Solr: version 8.8.1 only; version 8.9 only
• Apache Tika: version 1.25 only
• Debian Debian Linux: version 9.0 only
• Fedoraproject Fedora: version 35 only
• Jdom Jdom: up to and including 2.0.6
• Oracle Communications Messaging Server: version 8.1 only

Published 2021-06-16. Last modified 2026-06-17.