Security Bulletin: Due to use of Apache Tika, IBM Operations Analytics - Log Analysis is affected by XML External Entity (XXE) vulnerability

Summary Apache Tika in Apache Solr is used by IBM Operations Analytics - Log Analysis as part of the extraction of text and metadata from uploaded documents so they can be indexed and searched through Solr's ExtractingRequestHandler. CVE-2025-54988, CVE-2025-66516 Vulnerability Details...

Security Bulletin: IBM Operations Analytics - Log Analysis is affected by denial of service (DoS), server-side request forgery (SSRF) protections, leak or corrupt request data, and security by-pass due to the use of Eclipse Jetty

Summary Eclipse Jetty in Apache Solr, and Apache ZooKeeper is used by IBM Operations Analytics - Log Analysis as Solr's HTTP endpoints and admin UI, and on Zookeeper as AdminServer HTTP interface. CVE-2024-8184, CVE-2024-6763, CVE-2024-13009, CVE-2025-11143 Vulnerability Details CVEID:CVE-2024-81...

K000160272: Apache Solr vulnerability CVE-2026-22444

Security Advisory Description The "create core" API of Apache Solr 8.6 through 9.10.0 lacks sufficient input validation on some API parameters, which can cause Solr to check the existence of and attempt to read file-system paths that should be disallowed by Solr's "allowPaths" security setting...

Exploit for Injection in Apache Solr

Apache-Solr-RCE-CVE-2019-17558 🛡️ Apache Solr Remote Code E...

Security Bulletin: IBM Operational Decision Manager - Multiple CVEs addressed related to Solr Core

Summary IBM Operational Decision Manager is vulnerable to multiple remote code execution and denial of service attacks in third party and open source used in the product for various functions. See full list below. The vulnerabilities have been addressed Vulnerability Details CVEID:CVE-2024-45217...

CVE-2026-22444 vulnerabilities

Vulnerabilities for packages: solr...

GHSA-VC2W-4V3P-2MQW vulnerabilities

Vulnerabilities for packages: solr...

CVE-2026-22444 vulnerabilities

Vulnerabilities for packages: solr...

GHSA-VC2W-4V3P-2MQW vulnerabilities

Vulnerabilities for packages: solr...

CVE-2026-22022 vulnerabilities

Vulnerabilities for packages: solr...

GHSA-QR3P-2XJ2-Q7HQ vulnerabilities

Vulnerabilities for packages: solr...

CVE-2026-22022 vulnerabilities

Vulnerabilities for packages: solr...

GHSA-QR3P-2XJ2-Q7HQ vulnerabilities

Vulnerabilities for packages: solr...

Linux Distros Unpatched Vulnerability : CVE-2026-22444

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The create core API of Apache Solr 8.6 through 9.10.0 lacks sufficient input validation on some API parameters, which can cause Solr to check the existence of a...

Linux Distros Unpatched Vulnerability : CVE-2026-22022

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Deployments of Apache Solr 5.3.0 through 9.10.0 that rely on Solr's Rule Based Authorization Plugin are vulnerable to allowing unauthorized access to certain So...

GHSA-J58C-WW9W-PWP5 vulnerabilities

Vulnerabilities for packages: solr...

CVE-2025-0716 vulnerabilities

Vulnerabilities for packages: solr...

CVE-2025-0716 vulnerabilities

Vulnerabilities for packages: solr...

GHSA-J58C-WW9W-PWP5 vulnerabilities

Vulnerabilities for packages: solr...

BIT-SOLR-2026-22444 Apache Solr: Insufficient file-access checking in standalone core-creation requests

The "create core" API of Apache Solr 8.6 through 9.10.0 lacks sufficient input validation on some API parameters, which can cause Solr to check the existence of and attempt to read file-system paths that should be disallowed by Solr's "allowPaths" security setting...