Filter
-Infinity
0
Trending
Versions
1.0.0
16
1.1.0
6
1.10.0
6
1.1.1
5
1.11.4
4
1.2.0
4
0.7.0
3
1.0.1
3
1.1.2
3
1.3.0
3
1.4.0
3
1.7.1
3
1.9.2
3
2.0.0-milestone1
3
2.0.0-milestone2
3
2.0.0-milestone3
3
0.0.1
2
0.0.2
2
0.7.1
2
0.7.3
2
1.14.0
2
1.16.0
2
1.21.0
2
2.0.0-milestone1-rc1
2
2.0.0-milestone1-rc2
2
2.0.0-milestone1-rc3
2
2.0.0-milestone1-rc4
2
2.0.0-milestone1-rc5
2
2.0.0-milestone1-rc6
2
2.0.0-milestone2-rc1
2
2.0.0-milestone2-rc2
2
2.0.0-milestone2-rc3
2
2.0.0-milestone2-rc4
2
2.0.0-milestone3-rc1
2
0.1.0
1
1.11.0
1
1.12.1
1
1.13.0
1
1.15.0
1
1.16.2
1
1.19.1
1
1.22.0
1
1.27.0
1
1.6.0
1
1.7.0
1
1.8.0
1
2.0.0-milestone4
1
2.0.0-milestone4-rc1
1
maven/org.apache.nifi:nifi-web-apiApache NiFi: Missing Complete Authorization for Parameter and Service References
5.4
First published (updated )
CVE-2024-56512: Apache NiFi: Missing Complete Authorization for Parameter and Service fences
First published (updated )
Apache NiFiApache NiFi: Potential Insertion of Sensitive Parameter Values in Debug Log
6.9
First published (updated )
CVE-2024-52067: Apache NiFi: Potential Insertion of Sensitive Parameter Values in Debug Log
First published (updated )
Apache NiFiApache NiFi: Improper Neutralization of Input in Parameter Description
4.6
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-45477: Apache NiFi: Improper Neutralization of Input in Parameter Description
First published (updated )
Apache NiFiApache NiFi: Improper Neutralization of Input in Parameter Context Description
5.4
First published (updated )
CVE-2024-37389: Apache NiFi: Improper Neutralization of Input in Parameter Context Description
First published (updated )
maven/org.apache.nifi:nifi-jolt-transform-json-uiApache NiFi: Improper Neutralization of Input in Advanced User Interface for Jolt
7.9
First published (updated )
CVE-2023-49145: Apache NiFi: Improper Neutralization of Input in Advanced User Interface for Jolt
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache NiFiApache NiFi: Incomplete Validation of JDBC and JNDI Connection URLs
6.5
First published (updated )
CVE-2023-40037: Apache NiFi: Incomplete Validation of JDBC and JNDI Connection URLs
First published (updated )
Apache NiFiApache NiFi: Potential Code Injection with Properties Referencing Remote Resources
8.8
First published (updated )
CVE-2023-36542: Apache NiFi: Potential Code Injection with Properties Referencing Remote Resources
First published (updated )
Apache NiFiApache NiFi: Potential Deserialization of Untrusted Data with JNDI in JMS Components
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache NiFiApache NiFi: Potential Code Injection with Database Services using H2
8.8
First published (updated )
Apache NiFiImproper Neutralization of Command Elements in Shell User Group Provider
8.8
First published (updated )
Apache NiFiImproper Restriction of XML External Entity References in Multiple Components
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache NiFiApache NiFi information disclosure by XXE
6.5
First published (updated )
Mortbay JettyEclipse Jetty is vulnerable to a denial of service, caused by an error when handling a request conta…
7.5
First published (updated )
maven/com.fasterxml.jackson.core:jackson-databindSSRF
9.8
First published (updated )
Apache NiFiIn Apache NiFi 1.2.0 to 1.11.4, the NiFi UI and API were protected by mandating TLS v1.2, as well as…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache NiFiIn Apache NiFi 1.0.0 to 1.11.4, the NiFi download token (one-time password) mechanism used a fixed c…
7.5
First published (updated )
maven/org.apache.nifi:nifi-statelessIn Apache NiFi 1.10.0 to 1.11.4, the NiFi stateless execution engine produced log output which inclu…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.