Known vulnerabilities in n/a Apache NiFi

Is your version affected?

CVE	Summary	Score	Published
CVE-2020-9491	In Apache NiFi 1.2.0 to 1.11.4, the NiFi UI and API were protected by mandating TLS v1.2, as well as listening…	Not rated	Oct 1, 2020
CVE-2020-13940	In Apache NiFi 1.0.0 to 1.11.4, the notification service manager and various policy authorizer and user group provider…	Not rated	Oct 1, 2020
CVE-2020-9487	In Apache NiFi 1.0.0 to 1.11.4, the NiFi download token (one-time password) mechanism used a fixed cache size and did…	Not rated	Oct 1, 2020
CVE-2020-9486	In Apache NiFi 1.10.0 to 1.11.4, the NiFi stateless execution engine produced log output which included sensitive…	Not rated	Oct 1, 2020
CVE-2020-1942	In Apache NiFi 0.0.1 to 1.11.0, the flow fingerprint factory generated flow fingerprints which included sensitive…	Not rated	Feb 11, 2020
CVE-2019-10083	When updating a Process Group via the API in NiFi versions 1.3.0 to 1.9.2, the response to the request includes all of…	Not rated	Nov 19, 2019
CVE-2019-12421	When using an authentication mechanism other than PKI, when the user clicks Log Out in NiFi versions 1.0.0 to 1.9.2,…	Not rated	Nov 19, 2019
CVE-2019-10080	The XMLFileLookupService in NiFi versions 1.3.0 to 1.9.2 allowed trusted users to inadvertently configure a…	Not rated	Nov 19, 2019