CVE-2019-10080 is a vulnerability in Apache NiFi
Published on November 19, 2019
The XMLFileLookupService in NiFi versions 1.3.0 to 1.9.2 allowed trusted users to inadvertently configure a potentially malicious XML file. The XML file has the ability to make external calls to services (via XXE) and reveal information such as the versions of Java, Jersey, and Apache that the NiFI instance uses.
Products Associated with CVE-2019-10080
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2019-10080 are published in Apache NiFi:
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.