Apache Nifi Vulnerabilities
Apache Nifi vulnerabilities.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Java Object Deserialization Vulnerability in Apache NiFi Versions 1.20.0 to 2.6.0
CVE-2025-66524ApacheApache Nifi7.5HIGHAuthentication Credentials Exposure in Apache NiFi by Apache
CVE-2025-27017ApacheApache Nifi6.9MEDIUMAuthorization Flaw in Apache NiFi Affecting Parameter Contexts and Controller Services
CVE-2024-56512Apache Software F...Nifi👾🟡EPSS 28%5.4MEDIUMOptional Debug Logging in Apache NiFi Could Lead to Sensitive Information Disclosure
CVE-2024-52067ApacheApache Nifi4.9MEDIUMCross-Site Scripting Vulnerability in Apache NiFi
CVE-2024-45477ApacheNifi4.6MEDIUMApache NiFi vulnerable to cross-site scripting
CVE-2024-37389ApacheApache Nifi4.6MEDIUMApache NiFi: Improper Neutralization of Input in Advanced User Interface for Jolt
CVE-2023-49145ApacheApache Nifi7.9HIGHApache NiFi MiNiFi C++: Incorrect Certificate Validation in InvokeHTTP for MiNiFi C++
CVE-2023-41180ApacheApache Nifi Minifi C++5.9MEDIUMApache NiFi: Incomplete Validation of JDBC and JNDI Connection URLs
CVE-2023-40037ApacheApache Nifi👾🟡6.5MEDIUMApache NiFi: Potential Code Injection with Properties Referencing Remote Resources
CVE-2023-36542ApacheApache Nifi8.8HIGHApache NiFi: Potential Deserialization of Untrusted Data with JNDI in JMS Components
CVE-2023-34212ApacheApache Nifi👾🟡6.5MEDIUMApache NiFi: Potential Code Injection with Database Services using H2
CVE-2023-34468ApacheApache Nifi👾🟡EPSS 77%📰8.8HIGHApache NiFi: Improper Restriction of XML External Entity References in ExtractCCDAAttributes
CVE-2023-22832ApacheApache Nifi7.5HIGHImproper Neutralization of Command Elements in Shell User Group Provider
CVE-2022-33140ApacheApache Nifi8.8HIGHImproper Restriction of XML External Entity References in Multiple Components
CVE-2022-29265ApacheApache Nifi7.5HIGHInsufficiently protected credentials
CVE-2022-26850ApacheApache Nifi4.3MEDIUMApache NiFi information disclosure by XXE
CVE-2021-44145ApacheApache Nifi6.5MEDIUMMiNiFi CPP arbitrary script execution is possible on the agent's host machine through the c2 protocol
CVE-2021-33191ApacheApache Nifi - Minifi C++9.8CRITICALImproper TLS Protocol Support in Apache NiFi by the Apache Software Foundation
CVE-2020-9491ApacheApache Nifi7.5HIGHXML External Entity Processing Vulnerability in Apache NiFi by The Apache Software Foundation
CVE-2020-13940ApacheApache Nifi5.5MEDIUMToken Creation Vulnerability in Apache NiFi by Apache Software Foundation
CVE-2020-9487ApacheApache Nifi7.5HIGHSensitive Data Exposure in Apache NiFi by Apache
CVE-2020-9486ApacheApache Nifi7.5HIGHAuthentication Flaw in NiFi Registry Software by Apache
CVE-2020-9482ApacheApache Nifi Registry6.5MEDIUMSensitive Data Exposure in Apache NiFi
CVE-2020-1942ApacheApache Nifi7.5HIGHCross-Site Scripting Vulnerability in Apache NiFi by Apache
CVE-2020-1933ApacheApache Nifi6.1MEDIUM