org.apache.nifi.minifi:minifi-assembly (>=2.0.0-m1, <=2.8.0), org.apache.nifi.minifi:minifi-c2-assembly (2.0.0-m1) +27 more potentially affected by CVE-2026-44914 via org.apache.nifi:nifi-framework-core (>=2.0.0-m1, <=2.9.0)

org.apache.nifi:nifi-framework-core MAVEN version =2.0.0-m1, =2.0.0-m1, =2.0.0-m2, =2.0.0-m1, =2.0.0-m1, =2.0.0-m1, =2.0.0-m1, =2.0.0-m3, =2.0.0-m3, =2.0.0-m3, =2.0.0-m3, =2.0.0-m3, =2.0.0 and more Source cves: CVE-2026-44914 Source advisory: SNYK:JAVA-ORGAPACHENIFI-17875414...

org.apache.nifi.minifi:minifi-assembly (>=2.0.0-m1, <=2.8.0), org.apache.nifi.minifi:minifi-c2-assembly (2.0.0-m1) +35 more potentially affected by CVE-2026-44914 via org.apache.nifi:nifi-stateless-engine (>=2.0.0-m1, <=2.9.0)

org.apache.nifi:nifi-stateless-engine MAVEN version =2.0.0-m1, =2.0.0-m1, =2.0.0-m2, =2.0.0-m1, =2.0.0-m1, =2.0.0-m1, =2.0.0-m1, =2.0.0-m3, =2.0.0-m3, =2.0.0-m3, =2.0.0-m3, =2.0.0-m3, =2.0.0 and more Source cves: CVE-2026-44914 Source advisory: SNYK:JAVA-ORGAPACHENIFI-17875416...

org.apache.nifi.minifi:minifi-assembly (>=2.0.0-m1, <=2.8.0), org.apache.nifi.minifi:minifi-bootstrap (>=2.0.0-m1, <=2.0.0-m2) +46 more potentially affected by CVE-2026-44914 via org.apache.nifi:nifi-runtime-manifest-core (>=2.0.0-m1, <=2.9.0)

org.apache.nifi:nifi-runtime-manifest-core MAVEN version =2.0.0-m1, =2.0.0-m1, =2.0.0-m1, =2.0.0-m1, =2.0.0-m1, =2.0.0-m1, =2.0.0-m1, =2.0.0-m1, =2.0.0-m1, =2.0.0-m1, =2.0.0-m2 - org.apache.nifi.minifi:minifi-toolkit-encrypt-config 2.0.0-m2 and more Source cves: CVE-2026-44914 Source advisory:...

CVE-2021-33191

From Apache NiFi MiNiFi C++ version 0.5.0 the c2 protocol implements an "agent-update" command which was designed to patch the application binary. This "patching" command defaults to calling a trusted binary, but might be modified to an arbitrary value through a "c2-update" command. Said command ...

EUVD-2021-19906

Malware in sbrugna...

EUVD-2023-45697

Malicious code in bioql PyPI...

CVE-2023-41180

Incorrect certificate validation in InvokeHTTP on Apache NiFi MiNiFi C++ versions 0.13 to 0.14 allows an intermediary to present a forged certificate during TLS handshake negotation. The Disable Peer Verification property of InvokeHTTP was effectively flipped, disabling verification by default,...

The vulnerability of the InvokeHTTP component in the Apache NiFi MiNiFi data processing platform, which exists due to insufficient verification of certificate authenticity, allows attackers to compromise data integrity.

The vulnerability of the InvokeHTTP component in the Apache NiFi MiNiFi data processing platform exists due to insufficient verification of certificate authenticity. Exploiting this vulnerability allows an attacker to compromise data integrity from a remote location...

CVE-2023-41180

Incorrect certificate validation in InvokeHTTP on Apache NiFi MiNiFi C++ versions 0.13 to 0.14 allows an intermediary to present a forged certificate during TLS handshake negotation. The Disable Peer Verification property of InvokeHTTP was effectively flipped, disabling verification by default,...

Default credentials

Incorrect certificate validation in InvokeHTTP on Apache NiFi MiNiFi C++ versions 0.13 to 0.14 allows an intermediary to present a forged certificate during TLS handshake negotation. The Disable Peer Verification property of InvokeHTTP was effectively flipped, disabling verification by default,...

CVE-2023-41180

Incorrect certificate validation in InvokeHTTP on Apache NiFi MiNiFi C++ versions 0.13 to 0.14 allows an intermediary to present a forged certificate during TLS handshake negotation. The Disable Peer Verification property of InvokeHTTP was effectively flipped, disabling verification by default,...

CVE-2023-41180 Apache NiFi MiNiFi C++: Incorrect Certificate Validation in InvokeHTTP for MiNiFi C++

Incorrect certificate validation in InvokeHTTP on Apache NiFi MiNiFi C++ versions 0.13 to 0.14 allows an intermediary to present a forged certificate during TLS handshake negotation. The Disable Peer Verification property of InvokeHTTP was effectively flipped, disabling verification by default,...

CVE-2023-41180 Apache NiFi MiNiFi C++: Incorrect Certificate Validation in InvokeHTTP for MiNiFi C++

Incorrect certificate validation in InvokeHTTP on Apache NiFi MiNiFi C++ versions 0.13 to 0.14 allows an intermediary to present a forged certificate during TLS handshake negotation. The Disable Peer Verification property of InvokeHTTP was effectively flipped, disabling verification by default,...

CVE-2023-41180 Apache NiFi MiNiFi C++: Incorrect Certificate Validation in InvokeHTTP for MiNiFi C++

Incorrect certificate validation in InvokeHTTP on Apache NiFi MiNiFi C++ versions 0.13 to 0.14 allows an intermediary to present a forged certificate during TLS handshake negotation. The Disable Peer Verification property of InvokeHTTP was effectively flipped, disabling verification by default,...

CVE-2023-41180

CVE-2023-41180 affects Apache NiFi MiNiFi C++: InvokeHTTP in versions 0.13 to 0.14 has incorrect certificate validation, allowing an intermediary to present a forged certificate during TLS handshake because the Disable Peer Verification setting was effectively flipped, disabling verification by d...

PT-2023-6523 · Apache · Apache Nifi Minifi C++

Name of the Vulnerable Software and Affected Versions: Apache NiFi MiNiFi C++ versions 0.13 through 0.14 Description: The issue is related to incorrect certificate validation in the InvokeHTTP component, allowing an intermediary to present a forged certificate during TLS handshake negotiation. Th...

Apache NiFi Trust Management Issues Vulnerability

Apache NiFi is a data processing and distribution system from the Apache USA Foundation. The system is primarily used for data routing, transformation, and system brokering logic. A trust management issue vulnerability exists in Apache NiFi MiNiFi C++ versions 0.13 through 0.14, which stems from...

CVE-2023-41180: Improper Certificate Validation

Incorrect certificate validation in InvokeHTTP on Apache NiFi MiNiFi C++ versions 0.13 to 0.14 allows an intermediary to present a forged certificate during TLS handshake negotation. The Disable Peer Verification property of InvokeHTTP was effectively flipped, disabling verification by default,...

com.hcl.commerce:commerce-search-processors (>=9.1.12.0, <=9.1.15.0), org.apache.nifi.minifi:minifi-assembly (>=1.14.0, <=1.22.0) +7 more potentially affected by CVE-2023-36542 via org.apache.nifi:nifi-standard-processors (>=0.0.2-incubating, <=1.22.0)

org.apache.nifi:nifi-standard-processors MAVEN version =0.0.2-incubating, =9.1.12.0, =1.14.0, =1.14.0, =1.14.0, =0.0.2-incubating, =1.15.0, =1.14.0, =1.22.0 - org.apache.plc4x:plc4j-nifi-plc4x-nar 0.10.0 - org.apache.plc4x:plc4j-nifi-plc4x-processors 0.10.0 Source cves: CVE-2023-36542 Source...

CVE-2021-33191

From Apache NiFi MiNiFi C++ version 0.5.0 the c2 protocol implements an "agent-update" command which was designed to patch the application binary. This "patching" command defaults to calling a trusted binary, but might be modified to an arbitrary value through a "c2-update" command. Said command ...