Nifi registry

This hub aggregates every CVE we track for Nifi registry, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 6 most recently published vulnerabilities affecting Nifi registry.

• CVE-2023-6378Logback "receiver" DOS vulnerability 7.1Nov 29, 2023
• CVE-2023-34055Spring Boot server Web Observations DoS Vulnerability5.3Nov 28, 2023
• CVE-2023-35887Apache MINA SSHD: Information disclosure bugs with RootedFilesystem5.0Jul 10, 2023
• CVE-2022-33140Improper Neutralization of Command Elements in Shell User Group Provider8.8Jun 15, 2022
• CVE-2020-9482If NiFi Registry 0.1.0 to 0.5.0 uses an authentication mechanism other than PKI, when the user clicks Log Out, NiFi Registry invalidates the authentication token on the client side but not on the s...6.5Apr 28, 2020
• CVE-2016-1000027Pivotal Spring Framework through 5.3.16 suffers from a potential remote code execution (RCE) issue if used for Java deserialization of untrusted data. Depending on how the library is implemented wi...9.8Jan 2, 2020