Skip to content
OpenAdvisories

Package · Maven

org.apache.nifi:nifi-web-api

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.3
    CVE-2026-44911

    Apache NiFi: Incorrect Authorization for Configuration Verification Requests

    Authorization handling for component configuration verification requests in Apache NiFi 1.15.0 through 2.9.0 allows clients with read access to submit proposed configuration properties. The proposed properties override current configuration, enabling users wi…

    Apache Software Foundation Apache NiFi org.apache.nifi:nifi-web-api Maven
  • Low 2.1
    CVE-2024-56512 Public exploit Scanner template

    Apache NiFi: Missing Complete Authorization for Parameter and Service References

    Apache NiFi 1.10.0 through 2.0.0 are missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers, when creating new Process Groups. Creating a new Process Group can include binding to …

    Apache Software Foundation Apache NiFi org.apache.nifi:nifi-web-api Maven