AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2020-9486

HIGH · CVSS 7.5 EPSS 3.56%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-10-01 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.5. It affects Apache.

CVE
CVE-2020-9486
Severity
HIGH
CVSS
7.5
EPSS
3.56%
Apache

Original NVD Description

In Apache NiFi 1.10.0 to 1.11.4, the NiFi stateless execution engine produced log output which included sensitive property values. When a flow was triggered, the flow definition configuration JSON was printed, potentially containing sensitive values in plaintext.

Related CVEs

Other vulnerabilities affecting the same vendor(s)