CVE-2019-10080 is a vulnerability in Apache NiFi
Published on November 19, 2019
The XMLFileLookupService in NiFi versions 1.3.0 to 1.9.2 allowed trusted users to inadvertently configure a potentially malicious XML file. The XML file has the ability to make external calls to services (via XXE) and reveal information such as the versions of Java, Jersey, and Apache that the NiFI instance uses.
Products Associated with CVE-2019-10080
Want to know whenever a new CVE is published for Apache NiFi? stack.watch will email you.
Exploit Probability
EPSS
0.42%
Percentile
61.38%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.