Filter
AND
Versions
maven/org.apache.nifi:nifi-jolt-transform-json-uiApache NiFi: Improper Neutralization of Input in Advanced User Interface for Jolt
7.9
First published (updated )
Apache NiFiApache NiFi: Potential Code Injection with Properties Referencing Remote Resources
8.8
First published (updated )
Apache NiFiApache NiFi: Potential Code Injection with Database Services using H2
8.8
First published (updated )
Apache NiFiImproper Neutralization of Command Elements in Shell User Group Provider
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache NiFiImproper Restriction of XML External Entity References in Multiple Components
7.5
First published (updated )
Eclipse JettyEclipse Jetty is vulnerable to a denial of service, caused by an error when handling a request conta…
7.5
First published (updated )
Apache NiFiIn Apache NiFi 1.2.0 to 1.11.4, the NiFi UI and API were protected by mandating TLS v1.2, as well as…
7.5
First published (updated )
Apache NiFiIn Apache NiFi 1.0.0 to 1.11.4, the NiFi download token (one-time password) mechanism used a fixed c…
7.5
First published (updated )
maven/org.apache.nifi:nifi-statelessIn Apache NiFi 1.10.0 to 1.11.4, the NiFi stateless execution engine produced log output which inclu…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache NiFiWhen using an authentication mechanism other than PKI, when the user clicks Log Out in NiFi versions…
8.8
First published (updated )
Oracle Utilities FrameworkA flaw was found in the Apache Commons BeanUtils, where the class property in PropertyUtilsBean is n…
7.5
First published (updated )
maven/org.apache.nifi:nifi-framework-clusterInput Validation
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache NiFiApache NiFi JMS Deserialization issue because of ActiveMQ client vulnerability. Malicious JMS conten…
7.5
First published (updated )
Apache NiFiIn Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, if an anonymous user requ…
7.5
First published (updated )
Apache NiFiApache NiFi before 0.7.4 and 1.x before 1.3.0 need to establish the response header telling browsers…
7.5
First published (updated )