CVE security advisories and vulnerability history for lucene-solr by apache.
Last updated
apache lucene-solr has 30 published CVE records since 2017, of which 2 are in CISA's Known Exploited Vulnerabilities catalog and 4 have a known public exploit. The average CVSS base score across scored CVEs is 7.5.
This page aggregates every publicly disclosed vulnerability (CVE) affecting apache lucene-solr, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
How the CVSS severity of apache lucene-solr's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
20 additional CVEs have no CVSS severity score.
In CISA’s Known Exploited Vulnerabilities catalog
2
2 of apache lucene-solr's CVEs are confirmed exploited in the wild.
Public exploits
4
4 of apache lucene-solr's CVEs have a known public exploit available.
Browse every apache lucene-solr version named in a CVE, then pick one to see only the CVEs that affect it.
30 CVEs
Added to CISA KEV 2021-11-03
Added to CISA KEV 2021-12-10
The CWE weakness categories most often found in apache lucene-solr CVEs. Follow any weakness for its full explanation.
How many apache lucene-solr CVEs were published each year.
Browse vulnerabilities for other products by apache.
Common questions about apache lucene-solr vulnerabilities.
apache lucene-solr has 30 published CVE records since 2017.
Yes — 2 of apache lucene-solr's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Yes — 4 of apache lucene-solr's CVEs have a known public exploit.
426 distinct apache lucene-solr versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
apache lucene-solr's CVEs most often map to these CWE weakness types: CWE-522 (Insufficiently Protected Credentials), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-40 (Path Traversal: '\\UNC\share\name\' (Windows UNC Share)), CWE-407 (Inefficient Algorithmic Complexity).
apache lucene-solr has 3 critical and 5 high-severity CVEs.
The average CVSS base score across apache lucene-solr's scored CVEs is 7.5.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Monitor new apache lucene-solr vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.
