Apache Solr vulnerabilities

47 CVEs affecting Apache Solr, 3 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-44825, published 2026-06-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-44487: HTTP/2 Rapid Reset Attack Vulnerability, published 2023-10-10. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2023-10-10. EPSS: 100% chance of exploitation in the next 30 days. The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2019-17558: Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability, published 2019-12-30. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 98.6% chance of exploitation in the next 30 days. Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided through Velocity templates in a configset…
CVE-2019-0193: Apache Solr DataImportHandler Code Injection Vulnerability, published 2019-08-01. High severity, CVSS 7.2. Actively exploited: in CISA KEV since 2021-12-10. EPSS: 83.5% chance of exploitation in the next 30 days. In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's…
CVE-2021-27905, published 2021-04-13. Critical severity, CVSS 9.8. EPSS: 93.1% chance of exploitation in the next 30 days. The ReplicationHandler (normally registered at "/replication" under a Solr core) in Apache Solr has a "masterUrl" (also "leaderUrl" alias) parameter that is used to designate another…
CVE-2024-45216, published 2024-10-16. Critical severity, CVSS 9.8. EPSS: 92.7% chance of exploitation in the next 30 days. Improper Authentication vulnerability in Apache Solr. Solr instances using the PKIAuthenticationPlugin, which is enabled by default when Solr Authentication is used, are vulnerable to Authentication…
CVE-2017-12629, published 2017-10-14. Critical severity, CVSS 9.8. EPSS: 91.9% chance of exploitation in the next 30 days. Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener…
CVE-2023-50386, published 2024-02-09. High severity, CVSS 8.8. EPSS: 83.7% chance of exploitation in the next 30 days. Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Solr.This…
CVE-2020-13957, published 2020-10-13. Critical severity, CVSS 9.8. EPSS: 79.3% chance of exploitation in the next 30 days. Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some features considered dangerous (which could be used for remote code execution) to be configured in a ConfigSet…
CVE-2019-0192, published 2019-03-07. Critical severity, CVSS 9.8. EPSS: 78.2% chance of exploitation in the next 30 days. In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request. By pointing it to a malicious RMI server, an attacker could take…
CVE-2020-27223, published 2021-02-26. Medium severity, CVSS 5.3. EPSS: 78% chance of exploitation in the next 30 days. In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of “quality” (i.e. q)…

Latest

CVE-2026-44825, published 2026-06-01. Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days. Hardcoded credentials in the Basic Authentication setup tool (bin/solr auth enable) in Apache Solr versions 9.4.0 through 9.10.1 and 10.0.0 allows a remote attacker to gain full administrative access…
CVE-2026-22444, published 2026-01-21. High severity, CVSS 7.1. EPSS: 0.7% chance of exploitation in the next 30 days. The "create core" API of Apache Solr 8.6 through 9.10.0 lacks sufficient input validation on some API parameters, which can cause Solr to check the existence of and attempt to read file-system paths…
CVE-2026-22022, published 2026-01-21. High severity, CVSS 8.2. EPSS: 0.6% chance of exploitation in the next 30 days. Deployments of Apache Solr 5.3.0 through 9.10.0 that rely on Solr's "Rule Based Authorization Plugin" are vulnerable to allowing unauthorized access to certain Solr APIs, due to insufficiently strict…
CVE-2025-24814, published 2025-01-27. Medium severity, CVSS 5.5. EPSS: 1.2% chance of exploitation in the next 30 days. Core creation allows users to replace "trusted" configset files with arbitrary configuration Solr instances that (1) use the "FileSystemConfigSetService" component (the default in "standalone" or…
CVE-2024-52012, published 2025-01-27. Medium severity, CVSS 5.4. EPSS: 45% chance of exploitation in the next 30 days. Relative Path Traversal vulnerability in Apache Solr. Solr instances running on Windows are vulnerable to arbitrary filepath write-access, due to a lack of input-sanitation in the "configset upload"…
CVE-2024-45217, published 2024-10-16. High severity, CVSS 8.1. EPSS: 0.7% chance of exploitation in the next 30 days. Insecure Default Initialization of Resource vulnerability in Apache Solr. New ConfigSets that are created via a Restore command, which copy a configSet from the backup and give it a new name, are…
CVE-2023-50298, published 2024-02-09. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr.This issue affects Apache Solr: from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1. Solr Streaming Expressions…
CVE-2023-50292, published 2024-02-09. High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days. Incorrect Permission Assignment for Critical Resource, Improper Control of Dynamically-Managed Code Resources vulnerability in Apache Solr. This issue affects Apache Solr: from 8.10.0 through…