Apache Nifi Vulnerabilities
Apache Apache Nifi vulnerabilities.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Apache NiFi REST API Vulnerability in Version 2.11.0
CVE-2026-70469ApacheApache Nifi7.5HIGHAuthorization Flaw in Apache NiFi's Connector Configuration Methods
CVE-2026-81866ApacheApache Nifi0.5LOWAuthorization Flaw in Apache NiFi Process Group Management
CVE-2026-82561ApacheApache Nifi5.9MEDIUMAuthorization Flaw in Apache NiFi Process Group Management
CVE-2026-86089ApacheApache Nifi2.3LOWPath Manipulation Vulnerability in Apache NiFi Registry by Apache
CVE-2026-87976ApacheApache Nifi Registry7.2HIGHMemory Consumption Vulnerability in Apache NiFi by Apache
CVE-2026-68981ApacheApache Nifi8.8HIGHAuthorization Flaw in Apache NiFi Affects Asset Management Functionality
CVE-2026-68980ApacheApache Nifi2.3LOWAuthorization Flaw in Apache NiFi Allows Unauthorized Parameter Modifications
CVE-2026-62354ApacheApache Nifi7.7HIGHAuthorization Bypass in Apache NiFi Affects Multiple Versions
CVE-2026-68979ApacheApache Nifi5.9MEDIUMAuthorization Bypass in Apache NiFi Process Groups
CVE-2026-44914ApacheApache Nifi7.5HIGHAuthorization Flaw in Apache NiFi Affects Configuration Management
CVE-2026-44911ApacheApache Nifi2.3LOWSQL Injection Vulnerability in Apache NiFi's CaptureChangeMySQL Processor
CVE-2026-44913ApacheApache Nifi5.2MEDIUMURL Manipulation Vulnerability in Apache NiFi by Apache
CVE-2026-54665ApacheApache Nifi6.3MEDIUMCode Execution Issue in Apache NiFi's TinkerpopClientService
CVE-2026-39816ApacheApache Nifi7.5HIGHAuthorization Flaw in Apache NiFi Affects Configuration Property Updates
CVE-2026-25903ApacheApache Nifi8.7HIGHJava Object Deserialization Vulnerability in Apache NiFi Versions 1.20.0 to 2.6.0
CVE-2025-66524ApacheApache Nifi7.5HIGHAuthentication Credentials Exposure in Apache NiFi by Apache
CVE-2025-27017ApacheApache Nifi6.9MEDIUMOptional Debug Logging in Apache NiFi Could Lead to Sensitive Information Disclosure
CVE-2024-52067ApacheApache Nifi4.9MEDIUMApache NiFi vulnerable to cross-site scripting
CVE-2024-37389ApacheApache NifiEPSS 24%4.6MEDIUMApache NiFi: Improper Neutralization of Input in Advanced User Interface for Jolt
CVE-2023-49145ApacheApache Nifi7.9HIGHApache NiFi MiNiFi C++: Incorrect Certificate Validation in InvokeHTTP for MiNiFi C++
CVE-2023-41180ApacheApache Nifi Minifi C++5.9MEDIUMApache NiFi: Incomplete Validation of JDBC and JNDI Connection URLs
CVE-2023-40037ApacheApache Nifi👾🟡6.5MEDIUMApache NiFi: Potential Code Injection with Properties Referencing Remote Resources
CVE-2023-36542ApacheApache Nifi8.8HIGHApache NiFi: Potential Deserialization of Untrusted Data with JNDI in JMS Components
CVE-2023-34212ApacheApache Nifi👾🟡6.5MEDIUMApache NiFi: Potential Code Injection with Database Services using H2
CVE-2023-34468ApacheApache Nifi👾🟡EPSS 61%📰8.8HIGH