Bitnami solr

Name: Bitnami solr
Brand: Bitnami

productUS

pkg:bitnami/solr

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

unpatched

by severity

5critical9high3medium1low

updated 2026-10-27

vulnerabilities (23)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-44487US	high7.5OT critical	100.0% (100th)	KEV	9.4.0	2023-10-10	< 9.4.0
CVE-2021-27905US	critical9.8	93.1% (100th)	Exploit	8.8.2	2021-04-13	< 8.8.2
CVE-2024-45216US	—OT elevated	92.7% (100th)	Exploit	9.7.0	2024-10-16	2 versions
CVE-2023-50386US	high8.8	83.7% (100th)	Exploit	9.4.1	2024-02-09	2 versions
CVE-2020-13957US	critical9.8OT high	79.3% (100th)	Exploit	8.6.3	2020-10-13	3 versions
CVE-2020-27223US	medium5.3	78.0% (100th)	Exploit	8.8.2	2021-02-26	8.8.1 → 8.8.2
CVE-2020-13941US	high8.8	5.26% (93rd)	Exploit	8.6.0	2020-08-17	< 8.6.0
CVE-2026-44825US	critical9.8OT high	3.92% (90th)	Exploit	10.0.0	2026-06-01	2 versions
CVE-2026-22444US	—	0.69% (52nd)	Exploit	9.10.1	2026-01-21	8.6.0 → 9.10.1
CVE-2023-50290US	medium6.5	68.4% (99th)	—	9.3.0	2024-01-15	9.0.0 → 9.3.0
CVE-2024-52012US	—	40.9% (99th)	—	9.8.0	2025-01-27	6.6.0 → 9.8.0
CVE-2021-33813US	high7.5	19.4% (97th)	—	8.9.1	2021-06-16	2 versions
CVE-2021-29262US	high7.5	6.72% (94th)	—	8.8.2	2021-04-13	< 8.8.2
CVE-2021-44548US	critical9.8	5.23% (92nd)	—	8.11.1	2021-12-23	< 8.11.1
CVE-2021-29943US	critical9.1OT elevated	4.67% (92nd)	—	8.8.2	2021-04-13	< 8.8.2
CVE-2020-9492US	high8.8OT elevated	4.49% (91st)	—	8.6.1	2021-01-26	2 versions
CVE-2021-28163US	low2.7	4.18% (91st)	—	8.8.2	2021-04-01	8.8.1 → 8.8.2
CVE-2023-50291US	high7.5	3.28% (88th)	—	8.11.3	2024-02-09	2 versions
CVE-2023-50292US	high7.5	3.02% (87th)	—	9.4.1	2024-02-09	2 versions
CVE-2023-50298US	high7.5	1.56% (75th)	—	9.4.1	2024-02-09	2 versions
CVE-2025-24814US	medium5.5	1.17% (67th)	—	9.8.0	2025-01-27	< 9.8.0
CVE-2024-45217US	—OT elevated	0.74% (54th)	—	8.11.4	2024-10-16	2 versions
CVE-2026-22022US	—	0.58% (47th)	—	9.10.1	2026-01-21	5.3.0 → 9.10.1

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-863Incorrect Authorization4 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-1188Initialization of a Resource with an Insecure Default2 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-522Insufficiently Protected Credentials2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-23Relative Path Traversal1 CVEs

sources (1)

Which sources assert this record, and when.

USOSV.dev23 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan