Search for packages
| purl | pkg:maven/org.apache.solr/solr-core@9.8.0 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 3.7 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-qr3p-2xj2-q7hq
Aliases: CVE-2026-22022 |
Apache Solr: Unauthorized bypass of certain "predefined permission" rules in the RuleBasedAuthorizationPlugin Deployments of Apache Solr 5.3.0 through 9.10.0 that … |
Vulnerable |
|
GHSA-vc2w-4v3p-2mqw
Aliases: CVE-2026-22444 |
Apache Solr: Insufficient file-access checking in standalone core-creation requests The "create core" API of Apache Solr 8.6 through 9.10.0 lacks … |
Vulnerable |
|
GHSA-qhr7-h655-pw6r
Aliases: CVE-2026-44825 |
Apache Solr has hardcoded credentials in the Basic Authentication setup tool Hardcoded credentials in the Basic Authentication setup tool (bin/solr … | There are no reported fixed by versions. |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-68r2-fwcg-qpm8
|
Apache Solr vulnerable to Execution with Unnecessary Privileges Core creation allows users to replace "trusted" configset files with arbitrary configuration … |
CVE-2025-24814
|
|
GHSA-4p5m-gvpf-f3x5
|
Apache Solr Relative Path Traversal vulnerability Relative Path Traversal vulnerability in Apache Solr. Solr instances running on Windows are vulnerable … |
CVE-2024-52012
|