Bitnami nifi

Name: Bitnami nifi
Brand: Bitnami

productUS

pkg:bitnami/nifi

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

2critical17high16medium0low

updated 2026-10-27

vulnerabilities (37)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-27223US	medium5.3	78.0% (100th)	Exploit	no fix	2021-02-26	= 1.13.0
CVE-2023-34468US	high8.8	61.9% (99th)	Exploit	1.22.0	2023-06-12	0.0.2 → 1.22.0
CVE-2022-33140US	high8.8	3.74% (90th)	Exploit	no fix	2022-06-15	1.10.0 → 1.16.2
CVE-2024-56512US	medium5.4OT elevated	3.24% (88th)	Exploit	2.1.0	2024-12-28	1.10.0 → 2.1.0
CVE-2023-34212US	medium6.5	2.35% (84th)	Exploit	no fix	2023-06-12	1.8.0 → 1.21.0
CVE-2023-40037US	medium6.5	2.08% (81st)	Exploit	1.23.1	2023-08-18	1.21.0 → 1.23.1
CVE-2023-36542US	high8.8	1.90% (80th)	Exploit	no fix	2023-07-29	0.0.2 → 1.22.0
CVE-2026-39816US	high8.8OT high	0.76% (55th)	Exploit	2.9.0	2026-05-08	2.0.0 → 2.9.0
CVE-2021-20190US	high8.1	7.57% (94th)	—	no fix	2021-01-19	1.7.0 → 1.12.1
CVE-2020-1928US	medium5.3	3.96% (90th)	—	no fix	2020-01-28	= 1.10.0
CVE-2020-9486US	high7.5	3.56% (89th)	—	no fix	2020-10-01	1.0.0 → 1.11.4
CVE-2020-1942US	high7.5	3.12% (88th)	—	no fix	2020-02-11	0.0.1 → 1.11.0
CVE-2020-9487US	high7.5OT elevated	3.05% (87th)	—	no fix	2020-10-01	1.0.0 → 1.11.4
CVE-2020-9491US	high7.5OT elevated	2.87% (87th)	—	no fix	2020-10-01	1.0.0 → 1.11.4
CVE-2020-1933US	medium6.1	2.81% (86th)	—	no fix	2020-01-28	1.0.0 → 1.10.0
CVE-2022-29265US	high7.5	2.60% (85th)	—	no fix	2022-04-30	0.0.1 → 1.16.0
CVE-2020-13940US	medium5.5	1.91% (80th)	—	no fix	2020-10-01	1.0.0 → 1.11.4
CVE-2021-44145US	medium6.5	1.76% (78th)	—	1.15.1	2021-12-17	0.1.0 → 1.15.1
CVE-2022-26850US	medium4.3	1.49% (74th)	—	1.16.0	2022-04-06	1.14.0 → 1.16.0
CVE-2023-22832US	high7.5	1.41% (73rd)	—	no fix	2023-02-10	1.2.0 → 1.19.1
CVE-2023-49145US	medium5.4	1.21% (68th)	—	1.24.0	2023-11-27	0.7.0 → 1.24.0
CVE-2026-68979US	critical9.8OT elevated	0.81% (57th)	—	2.11.0	2026-08-03	1.10.0 → 2.11.0
CVE-2026-87976US	high8.1	0.79% (56th)	—	2.12.0	2026-09-16	0.4.0 → 2.12.0
CVE-2026-25903US	medium6.6OT elevated	0.75% (55th)	—	2.8.0	2026-02-17	1.1.0 → 2.8.0
CVE-2024-45477US	medium4.6	0.74% (55th)	—	1.28.0	2024-10-29	1.10.0 → 1.28.0
CVE-2026-68981US	high7.5	0.74% (54th)	—	2.11.0	2026-08-03	1.5.0 → 2.11.0
CVE-2026-44914US	high7.2OT elevated	0.66% (51st)	—	2.10.0	2026-06-22	1.12.0 → 2.10.0
CVE-2026-44913US	high7.2	0.65% (51st)	—	2.10.0	2026-06-22	1.2.0 → 2.10.0
CVE-2026-70469US	—	0.62% (50th)	—	2.12.0	2026-09-16	2.11.0 → 2.12.0
CVE-2025-66524US	high8.8	0.59% (48th)	—	2.7.0	2025-12-19	1.20.0 → 2.7.0
CVE-2026-81866US	medium4.3OT elevated	0.56% (47th)	—	2.12.0	2026-09-16	2.9.0 → 2.12.0
CVE-2026-44911US	medium6.3OT elevated	0.52% (44th)	—	2.10.0	2026-06-22	1.15.0 → 2.10.0
CVE-2026-68980US	critical9.1OT elevated	0.48% (41st)	—	2.11.0	2026-08-03	2.0.0 → 2.11.0
CVE-2026-82561US	—OT elevated	0.48% (41st)	—	2.12.0	2026-09-16	1.5.0 → 2.12.0
CVE-2026-62354US	medium4.3OT elevated	0.45% (39th)	—	2.11.0	2026-08-03	1.10.0 → 2.11.0
CVE-2026-86089US	high7.1OT elevated	0.44% (38th)	—	2.12.0	2026-09-16	2.11.0 → 2.12.0
CVE-2026-54665US	medium5.3	0.33% (26th)	—	2.10.0	2026-06-22	0.0.1 → 2.10.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-862Missing Authorization8 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-502Deserialization of Untrusted Data3 CVEs
CWE-532Insertion of Sensitive Information into Log File3 CVEs
CWE-611Improper Restriction of XML External Entity Reference3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-863Incorrect Authorization3 CVEs
CWE-409Improper Handling of Highly Compressed Data (Data Amplification)2 CVEs

sources (1)

Which sources assert this record, and when.

USOSV.dev37 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan