Apache Nifi

Name: Apache Nifi
Brand: Apache

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

unpatched

by severity

2critical6high9medium0low

updated 2026-10-28

vulnerabilities (17)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-34468US	high8.8	61.9% (99th)	Exploit	1.22.0	2023-06-12	< 1.22.0
CVE-2024-56512US	medium5.4OT elevated	3.24% (88th)	Exploit	2.1.0	2024-12-28	< 2.1.0
CVE-2023-34212US	medium6.5	2.35% (84th)	Exploit	1.22.0	2023-06-12	< 1.22.0
CVE-2026-39816US	high8.8OT high	0.76% (55th)	Exploit	2.9.0	2026-05-08	< 2.9.0
CVE-2025-27017US	medium6.5	1.25% (69th)	—	2.3.0	2025-03-12	< 2.3.0
CVE-2026-68979US	critical9.8OT elevated	0.81% (57th)	—	2.11.0	2026-08-03	< 2.11.0
CVE-2026-25903US	medium6.6OT elevated	0.75% (55th)	—	2.8.0	2026-02-17	< 2.8.0
CVE-2024-45477US	medium4.6	0.74% (55th)	—	2.0.0-M4	2024-10-29	2 versions
CVE-2026-68981US	high7.5	0.74% (54th)	—	2.11.0	2026-08-03	< 2.11.0
CVE-2024-52067US	medium4.9	0.73% (54th)	—	1.28.1	2024-11-21	2 versions
CVE-2026-44914US	high7.2OT elevated	0.66% (51st)	—	2.9.0	2026-06-22	< 2.9.0
CVE-2026-44913US	high7.2	0.65% (51st)	—	2.9.0	2026-06-22	< 2.9.0
CVE-2025-66524US	high8.8	0.59% (48th)	—	2.7.0	2025-12-19	< 2.7.0
CVE-2026-44911US	medium6.3OT elevated	0.52% (44th)	—	2.9.0	2026-06-22	< 2.9.0
CVE-2026-68980US	critical9.1OT elevated	0.48% (41st)	—	2.11.0	2026-08-03	< 2.11.0
CVE-2026-62354US	medium4.3OT elevated	0.45% (39th)	—	2.11.0	2026-08-03	< 2.11.0
CVE-2026-54665US	medium5.3	0.33% (26th)	—	2.10.0	2026-06-22	2 versions

The flaw types (CWEs) most of these CVEs share.

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.