VIR Vulnerability Intelligence Relay

Package impact

java Maven / org.apache.solr:solr-core

Severitycriticalhighmediumlowunknown
0
KEVHas exploit
Reset
CVE Severity CVSS Risk Published Description Impact
CVE-2017-12629 critical 9.8 9.8 9y ago Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener … debianubunturedhatjava+1
CVE-2019-0193 unknown — 1.5 7y ago XML External Entity (XXE) Injection in Apache Solr debianjava
CVE-2025-24814 unknown — — 1y ago Apache Solr vulnerable to Execution with Unnecessary Privileges debianjava
CVE-2024-52012 unknown — — 1y ago Apache Solr Relative Path Traversal vulnerability debianjava
CVE-2023-50291 unknown — — 2y ago Apache Solr can leak certain passwords due to System Property redaction logic inconsistencies debianjava
CVE-2023-50292 unknown — — 2y ago Apache Solr Schema Designer blindly "trusts" all configsets debianjava
CVE-2023-50386 unknown — — 2y ago Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets debianjava
CVE-2020-13957 unknown — — 4y ago Incorrect Authorization in Apache Solr debianjava
CVE-2018-1308 unknown — — 8y ago There is a XML external entity expansion (XXE) vulnerability in Apache Solr debianjava
CVE-2018-8026 unknown — — 8y ago XML external entity expansion in org.apache.solr:solr-core debianjava