CVE-2019-12409

CVE-2019-12409 is a critical vulnerability affecting Apache Solr versions 8.1.1 and 8.2.0, stemming from an insecure default setting in the solr.in.sh configuration file that enables unauthenticated JMX monitoring. This allows remote attackers with network access to the Solr nodes to access JMX, potentially leading to arbitrary code execution. With a CVSS score of 9.8 (Critical), the vulnerability is easily exploitable over the network with low attack complexity, posing a severe risk of complete compromise (confidentiality, integrity, and availability). While there is no evidence of active exploitation, public exploit code, or significant community discussion, its high EPSS and FAUCET risk scores indicate a substantial potential for future exploitation.