{"id":"CVE-2019-0192","published":"2019-03-07T21:00:00Z","modified":"2024-09-16T16:53:42Z","title":"In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an…","vendor":"Apache Software Foundation","product":"Apache Solr","tier":"core","eol":null,"affectedVersions":[{"vendor":"Apache Software Foundation","product":"Apache Solr","versions":["Apache Solr 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5"]}],"description":{"text":"In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request. By pointing it to a malicious RMI server, an attacker could take advantage of Solr's unsafe deserialization to trigger remote code execution on the Solr side.","provenance":"source","from":"CVE.org"},"summary":{"text":"The flaw is in Apache Solr's Config API, which lets the JMX server be configured through an HTTP POST request, and it affects the 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5 release ranges. An attacker who can send such a request can point the JMX configuration at a malicious RMI server, and Solr's unsafe deserialization then lets that attacker execute code on the Solr host, though the exact network, authentication, or configuration conditions required are not specified.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:18:51Z"},"cvss":null,"epss":{"score":0.78227,"percentile":0.99577,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2021-04-12","exploitedFirstSeen":"2021-04-12","ransomware":false,"evidence":[{"url":"https://unit42.paloaltonetworks.com/network-attack-trends-winter-2020/","date":"2021-04-12"}],"evidenceTotal":1,"provenance":"source"},"exploited":true,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"http://www.securityfocus.com/bid/107318","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://mail-archives.us.apache.org/mod_mbox/www-announce/201903.mbox/%3CCAECwjAV1buZwg%2BMcV9EAQ19MeAWztPVJYD4zGK8kQdADFYij1w%40mail.gmail.com%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/b0ace855f569c6b7a0b03ba68566e53b1a1a519abd536bf38978ce4a%40%3Cdev.lucene.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/42c5682f4acd1d03bd963e4f47ae448d7cff66c16b19142773818892%40%3Cdev.lucene.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/d0e608c681dfbb16b4da68d99d43fa0ddbd366bb3bcf5bc0d43c56d7%40%3Cdev.lucene.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/ec9c572fb803b26ba0318777977ee6d6a2fb3a2c50d9b4224e541d5d%40%3Cdev.lucene.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/53e4744b14fb7f1810405f8ff5531ab0953a23dd09ce8071ce87e00d%40%3Cdev.lucene.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2413","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","tags":["x_refsource_MISC"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","tags":["x_refsource_MISC"]},{"url":"https://security.netapp.com/advisory/ntap-20190327-0003/","tags":["x_refsource_CONFIRM"]},{"url":"https://lists.apache.org/thread.html/rc400db37710ee79378b6c52de3640493ff538c2beb41cefdbbdf2ab8%40%3Ccommits.submarine.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]}],"techniques":[],"reports":[],"affected":[{"ecosystem":"Maven","package":"org.apache.solr:solr-core","vulnerableRanges":[">=5.0.0, <7.0.0",">=6.0.0, <7.0.0"],"patched":["7.0.0"],"from":["GHSA-xhcq-fv7x-grr2"],"provenance":"source"}],"advisories":[{"id":"GHSA-xhcq-fv7x-grr2","url":"https://github.com/advisories/GHSA-xhcq-fv7x-grr2","severity":"CRITICAL","ecosystem":"Maven","package":"org.apache.solr:solr-core","vulnerableRanges":[">=5.0.0, <7.0.0"],"patched":["7.0.0"],"provenance":"source","from":"GHSA"},{"id":"GHSA-xhcq-fv7x-grr2","url":"https://github.com/advisories/GHSA-xhcq-fv7x-grr2","severity":"CRITICAL","ecosystem":"Maven","package":"org.apache.solr:solr-core","vulnerableRanges":[">=6.0.0, <7.0.0"],"patched":["7.0.0"],"provenance":"source","from":"GHSA"}],"euvd":{"id":"EUVD-2019-0397","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-0397","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":2,"skipped":0,"earliest":"2019-03-10","earliestUrl":"https://github.com/mpgn/CVE-2019-0192","repos":[{"name":"mpgn/CVE-2019-0192","url":"https://github.com/mpgn/CVE-2019-0192","stars":208,"created":"2019-03-10"},{"name":"Rapidsafeguard/Solr-RCE-CVE-2019-0192","url":"https://github.com/Rapidsafeguard/Solr-RCE-CVE-2019-0192","stars":4,"created":"2019-11-01"}]},"nuclei":[{"id":"CVE-2019-0192","name":"Apache Solr - Deserialization of Untrusted Data","severity":"critical","path":"http/cves/2019/CVE-2019-0192.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-0192.yaml"}],"first":{"date":"2019-03-10","source":"PoC-in-GitHub","url":"https://github.com/mpgn/CVE-2019-0192"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2019-03-07","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2019-0192","provenance":"source"},{"date":"2019-03-10","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/mpgn/CVE-2019-0192","provenance":"source"},{"date":"2021-04-12","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://unit42.paloaltonetworks.com/network-attack-trends-winter-2020/","provenance":"source"}],"speed":{"daysToPublicExploit":3,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":59.9,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 2026 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.92,"detail":"percentile 0.9958"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"2 PoC-in-GitHub repos; 1 nuclei template"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}