Approved changes feed: RSS · Atom

cpe:2.3:a:apache:nifi:1.15.0:*:*:*:*:*:*:*

part: a version: 1.15.0 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductNifi (c50d5476-8f35-5ca2-94ef-ba428d97a1b7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/nifi purl2cpe 2026-06-01 10:14:28.274735
pkg:docker/apache/nifi purl2cpe 2026-06-01 10:14:28.274736
pkg:github/apache/nifi purl2cpe 2026-06-01 10:14:28.274737
pkg:maven/org.apache.nifi/nifi purl2cpe 2026-06-01 10:14:28.274739

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-10086 vulnerable 2026-06-08 05:12:22.137037 Details available
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.
Published: 2019-08-20T20:10:15.000Z
Updated: 2024-08-04T22:10:09.585Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.