Onosproject Onos vulnerabilities

• onosproject onos-lib-go onos-lib-go allows an index out-of-range panic CVE-2025-30077 6.2 MediumMarch 16, 2025
• onosproject onos, traffic steering xapplication +1 more Open Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 has a slice bounds out-of-range panic in... CVE-2024-34050 7.5 HighApril 29, 2024
• linuxfoundation onos-ric-sdk-go, onosproject onos +1 more Open Networking Foundation SD-RAN ONOS onos-ric-sdk-go 0.8.12 allows infinite repetition of the... CVE-2023-52726 6.5 MediumApril 29, 2024
• onosproject onos ONOS vulnerable to Cross-site Scripting CVE-2023-30093 6.1 MediumMay 4, 2023
• onosproject onos In ONOS 1.15.0, apps/yang/web/src/main/java/org/onosproject/yang/web/YangWebResource.java... CVE-2019-13624 9.8 CriticalJuly 17, 2019
• onosproject onos ONOS ONOS controller version 1.13.1 and earlier contains a XML External Entity (XXE)... CVE-2018-1000616 9.8 CriticalJuly 9, 2018
• onosproject onos ONOS ONOS Controller version 1.13.1 and earlier contains a Denial of Service (Service crash)... CVE-2018-1000615 7.5 HighJuly 9, 2018
• onosproject onos ONOS ONOS Controller version 1.13.1 and earlier contains a XML External Entity (XXE)... CVE-2018-1000614 9.8 CriticalJuly 9, 2018
• onosproject onos Time-of-check to time-of-use (TOCTOU) race condition in org.onosproject.acl (aka the access... CVE-2018-12691 6.8 MediumJuly 5, 2018
• onosproject onos ONOS vulnerable to denial of service due to unrestricted NettyMessagingManager payload CVE-2017-13763 Fix available 7.5 HighAugust 30, 2017
• onosproject onos ONOS versions 1.8.0, 1.9.0, and 1.10.0 are vulnerable to XSS. CVE-2017-13762 6.1 MediumAugust 30, 2017
• onosproject onos ONOS before 1.5.0 when using the ifwd app allows remote attackers to cause a denial of service ... CVE-2015-7516 7.5 HighAugust 24, 2017
• onosproject onos Linux foundation ONOS 1.9.0 is vulnerable to unauthenticated upload of applications (.oar)... CVE-2017-1000081 9.8 CriticalJuly 13, 2017
• onosproject onos Linux foundation ONOS 1.9.0 allows unauthenticated use of websockets. CVE-2017-1000080 7.5 HighJuly 13, 2017
• onosproject onos Linux foundation ONOS 1.9.0 is vulnerable to a DoS. CVE-2017-1000079 7.5 HighJuly 13, 2017
• onosproject onos Linux foundation ONOS 1.9 is vulnerable to XSS in the device. registration CVE-2017-1000078 6.1 MediumJuly 13, 2017