Sploitus

20 exploited vulnerabilities in Apache Solr

Vulnerabilities with publicly known exploits

Vendors
Apache, Canonical, Debian
With known exploits
20
Affected Apache Solr versions
< 8.11.4, 9.7.0, 8.1.1, 8.2.0, 9.10.1, 10.0.0, 8.8.2, 5.5.5, 6.6.5, 5.5.4, 6.6.1, 7.0.1, 8.11.3, 9.4.1, 7.7.3, 8.1.2, 8.4.0, 9.3.0, 9.8.0, 4.5.1, 4.0.0, 4.1.0, 4.2.0, 4.2.1, 4.3.0, 4.3.1, 4.4.0, 4.5.0, 6.6.4, 7.3.1

Vulnerabilities with exploits

Highest CVSS first — 11 of these already have exploit code on Sploitus

CVE-2024-45216 2 exploits
CVSS 9.8 CRITICAL 2024-08-23FIX AVAILABLE
CVE-2019-12409 5 exploits
CVSS 9.8 CRITICAL 2019-11-18
CVE-2026-44825 4 exploits
CVSS 9.8 CRITICAL 2026-05-29FIX AVAILABLE
CVE-2021-27905 10 exploits
CVSS 9.8 CRITICAL 2021-04-13FIX AVAILABLE
CVE-2019-0192 3 exploits
CVSS 9.8 CRITICAL 2019-03-07FIX AVAILABLE
CVE-2017-12629 13 exploits
CVSS 9.8 CRITICAL 2017-09-22FIX AVAILABLE
CVE-2023-50386 5 exploits
CVSS 8.8 HIGH 2024-02-09FIX AVAILABLE
CVE-2019-0193 9 exploits
CVSS 9.0 HIGH 2019-08-01FIX AVAILABLE
CVE-2026-22022
CVSS 8.2 HIGH 2026-01-20FIX AVAILABLE
CVE-2019-17558 17 exploits
CVSS 7.5 HIGH 2019-12-30FIX AVAILABLE
CVE-2024-45217
CVSS 8.1 HIGH 2024-10-15FIX AVAILABLE
CVE-2023-50292
CVSS 7.5 HIGH 2024-02-09FIX AVAILABLE
CVE-2023-50298
CVSS 7.5 HIGH 2024-02-09FIX AVAILABLE
CVE-2023-50291
CVSS 7.5 HIGH 2024-02-08FIX AVAILABLE
CVE-2025-24814
CVSS 5.5 MEDIUM 2025-01-26FIX AVAILABLE
CVE-2026-22444 3 exploits
CVSS 7.1 HIGH 2026-01-21FIX AVAILABLE
CVE-2023-50290 1 exploit
CVSS 6.5 MEDIUM 2024-01-12FIX AVAILABLE
CVE-2024-52012
CVSS 5.4 MEDIUM 2025-01-26FIX AVAILABLE
CVE-2013-6397
CVSS 4.3 MEDIUM 2013-12-07FIX AVAILABLE
CVE-2018-8026
CVSS 5.5 MEDIUM 2018-07-05FIX AVAILABLE