Known vulnerabilities in Apache Nifi - page 2

Software: Apache Nifi
Software CPE: cpe:2.3:a:apache_foundation:apache_nifi:*:*:*:*:*:*:*:*
Total vulnerabilities: 30
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache Nifi Apache Nifi is affected by 30 known vulnerabilities: 1 critical, 2 high, 9 medium, 18 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU64418 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-33140
CWE-78 Medium
No
No
1.16.3 15.06.2022 SB2022061530
#VU62057 - Unprotected Storage of Credentials
CVE-2022-26850
CWE-256 Low
No
No
1.16.0 11.04.2022 SB2022041116
#VU59049 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-44145
CWE-611 Medium
No
No
1.15.1 17.12.2021 SB2021121704
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228
CWE-94 Critical
Available
Exploited
1.15.1 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more
#VU24701 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1933
CWE-79 Low
No
No
1.11.0 28.01.2020 SB2020012811
#VU24700 - Exposure of sensitive information to an unauthorized actor
CVE-2020-1928
CWE-200 Medium
No
No
1.11.0 28.01.2020 SB2020012811
#VU13038 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-1309
CWE-611 High
No
No
- 29.05.2018 SB2018052906
#VU13036 - Deserialization of Untrusted Data
CVE-2018-1310
CWE-502 Low
No
No
- 24.05.2018 SB2018052906
#VU11170 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-1324
CWE-835 Low
No
No
- 19.03.2018 SB2018032004
SB2018052906
SB2022011837
and 3 more
#VU9424 - Authentication Bypass Issues
CVE-2017-8028
CWE-592 Low
No
No
- 27.11.2017 SB2017101610
SB2017112207
SB2018052906
and 1 more


Showing elements 21 - 40 out of 30