Skip to content
OpenAdvisories

Package · Maven

org.apache.nifi:nifi-web-api

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2026-44914

    Apache NiFi: Missing Authorization of Restricted Permissions when Replacing Flow Contents

    Apache NiFi 1.12.0 through 2.9.0 are missing authorization when replacing Process Groups that include extension components with specific Required Permissions based on the Restricted annotation. The Restricted annotation indicates additional privileges require…

    Apache Software Foundation Apache NiFi org.apache.nifi:nifi-web-api Maven
  • High 8.7
    CVE-2026-25903

    Apache NiFi: Missing Authorization of Restricted Permissions for Component Updates

    Apache NiFi 1.1.0 through 2.7.2 are missing authorization when updating configuration properties on extension components that have specific Required Permissions based on the Restricted annotation. The Restricted annotation indicates additional privileges requ…

    Apache Software Foundation Apache NiFi org.apache.nifi:nifi-web-api Maven
  • High 8.8
    CVE-2019-12421

    Apache NiFi user log out issue

    When using an authentication mechanism other than PKI, when the user clicks Log Out in NiFi versions 1.0.0 to 1.9.2, NiFi invalidates the authentication token on the client side but not on the server side. This permits the user's client-side token to be used …

    org.apache.nifi:nifi-web-api org.apache.nifi:nifi-web-security Maven