Apache Software Foundation Solr 8.6.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:apache:solr:8.6.0:*:*:*:*:*:*:*

part: a version: 8.6.0 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductSolr (e541f611-5f4f-518b-9c5a-edac6afba2d9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/solr purl2cpe 2026-06-01 10:14:26.416903
pkg:github/apache/solr purl2cpe 2026-06-01 10:14:26.416905
pkg:maven/org.apache.solr/solr purl2cpe 2026-06-01 10:14:26.416906
pkg:maven/org.apache.solr/solrj purl2cpe 2026-06-01 10:14:26.416908
pkg:rpm/opensuse/solr purl2cpe 2026-06-01 10:14:26.416909
pkg:sourceforge/apache-solr purl2cpe 2026-06-01 10:14:26.416911

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-9492 vulnerable 2026-06-08 05:28:02.072852 Details available
In Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, and 2.0.0-alpha to 2.10.0, WebHDFS client might send SPNEGO authorization header to remote URL without proper verification.
Published: 2021-01-26T12:55:29.000Z
Updated: 2024-08-04T10:26:16.405Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.