org.apache.nifi:nifi vulnerabilities (Maven)

21 vulnerabilities.

• org.apache.nifi:nifi Maven Improper Neutralization of Command Elements in Shell User Group Provider CVE-2022-33140 Public exploitFix available 8.8 HighJune 15, 2022
• org.apache.nifi:nifi Maven Improper Restriction of XML External Entity References in Multiple Components CVE-2022-29265 Fix available 7.5 HighApril 30, 2022
• org.apache.nifi:nifi Maven Apache NiFi information disclosure by XXE CVE-2021-44145 Fix available 6.5 MediumDecember 17, 2021
• org.apache.nifi:nifi Maven Inadequate Encryption Strength in Apache NiFi CVE-2020-9491 Fix available 7.5 HighOctober 1, 2020
• org.apache.nifi:nifi Maven Improper Restriction of XML External Entity Reference in Apache NiFi CVE-2020-13940 Fix available 5.5 MediumOctober 1, 2020
• org.apache.nifi:nifi Maven Missing Authentication for Critical Function in Apache NiFi CVE-2020-9487 Fix available 7.5 HighOctober 1, 2020
• org.apache.nifi:nifi Maven Cross-site scripting in Apache NiFi CVE-2020-1933 Fix available 6.1 MediumJanuary 28, 2020
• org.apache.nifi:nifi Maven Apache NiFi process group information disclosure CVE-2019-10083 Fix available 5.3 MediumNovember 19, 2019
• org.apache.nifi:nifi Maven Apache NiFi information disclosure by XXE CVE-2019-10080 Fix available 6.5 MediumNovember 19, 2019
• org.apache.nifi:nifi Maven Cleartext Transmission of Sensitive Information in Apache nifi CVE-2018-17195 Fix available 7.5 HighDecember 19, 2018
• org.apache.nifi:nifi Maven Cross site scripting in org.apache.nifi:nifi CVE-2018-17193 Fix available 6.1 MediumDecember 19, 2018
• org.apache.nifi:nifi Maven Improper Restriction of Rendered UI Layers or Frames in Apache nifif CVE-2018-17192 Fix available 6.5 MediumDecember 19, 2018
• org.apache.nifi:nifi Maven Apache NiFi JMS Deserialization issue CVE-2018-1310 Fix available 7.5 HighMay 23, 2018
• org.apache.nifi:nifi Maven Apache NiFi XSS issue in context path handling CVE-2017-15697 Fix available 9.8 CriticalJanuary 23, 2018
• org.apache.nifi:nifi Maven Apache NiFi host header poisoning issue CVE-2017-12632 Fix available 7.5 HighJanuary 23, 2018
• org.apache.nifi:nifi Maven Injection in Apache NiFi CVE-2017-5636 Fix available 9.8 CriticalOctober 19, 2017
• org.apache.nifi:nifi Maven Improper Authentication In Apache NiFi CVE-2017-5635 Fix available 7.5 HighOctober 19, 2017
• org.apache.nifi:nifi Maven Cross-site Scripting in Apache NiFi CVE-2016-8748 Fix available 5.4 MediumOctober 19, 2017
• org.apache.nifi:nifi Maven XML External Entity Reference in Apache NiFi CVE-2017-12623 Fix available 6.5 MediumOctober 10, 2017
• org.apache.nifi:nifi Maven Origin Validation Error in Apache NiFi CVE-2017-7667 Fix available 7.5 HighJune 12, 2017
• org.apache.nifi:nifi Maven Cross-site Scripting in Apache NiFi CVE-2017-7665 Fix available 6.1 MediumJune 12, 2017