Opennms vulnerabilities

Products

• Meridian 23
• Horizon 22
• Opennms 13

Newest

• opennms horizon, meridian +1 more Cross-site scripting in bootstrap.jsp CVE-2023-40314 Fix available 5.8 MediumNovember 16, 2023
• opennms horizon, meridian +1 more Authenticated XXE Injection Via The File Editor CVE-2023-40612 5.3 MediumAugust 23, 2023
• opennms horizon, meridian +1 more ROLE_FILESYSTEM_EDITOR Can Be Used To Escalate To ROLE_ADMIN CVE-2023-40315 Public exploitFix available 5.3 MediumAugust 17, 2023
• opennms horizon, meridian +1 more Disable BeanShell Interpreter Remote Server Mode CVE-2023-40313 Fix available 7.1 HighAugust 17, 2023
• opennms horizon, meridian +1 more Reflected XSS in multiple JSP files in opennms/opennms CVE-2023-40312 Fix available 6.7 MediumAugust 14, 2023
• opennms horizon, meridian +1 more Stored XSS in multiple JSP files in opennms/opennms CVE-2023-40311 Fix available 6.7 MediumAugust 14, 2023
• opennms horizon, meridian +1 more ROLE_REST can be used to escalate to ROLE_ADMIN via /rest/users CVE-2023-0872 Public exploitFix available 8.2 HighAugust 14, 2023
• opennms horizon, meridian +1 more An XML External Entity injection vulnerability CVE-2023-0871 Fix available 5.4 MediumAugust 11, 2023
• opennms horizon, meridian +1 more Form Can Be Manipulated with Cross-Site Request Forgery (CSRF) CVE-2023-0870 Fix available 8.1 HighMarch 22, 2023
• opennms horizon, meridian +1 more Plaintext Password Present in the Web logs CVE-2023-0815 Fix available 6.8 MediumFebruary 23, 2023
• opennms horizon, meridian +1 more Multiple stored and reflected Cross-site Scripting in webapp CVE-2023-0867 Fix available 6.7 MediumFebruary 23, 2023
• opennms horizon, meridian +1 more Stealing Cookies using Reflected XSS via graph results CVE-2023-0868 Fix available 6.7 MediumFebruary 23, 2023
• opennms horizon, meridian +1 more Cross-site scripting in outage/list.htm CVE-2023-0869 5.8 MediumFebruary 23, 2023
• opennms horizon, meridian +1 more Unauthenticated, stored XSS in display of alarm reduction-key CVE-2023-0846 Fix available 6.7 MediumFebruary 22, 2023
• opennms OpenNMS Stored XSS via SNMP Agent Data CVE-2016-6556 7.1 HighSeptember 24, 2021
• opennms OpenNMS Stored XSS via SNMP Trap Alerts CVE-2016-6555 7.1 HighSeptember 24, 2021
• opennms meridian, opennms +1 more In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian,... CVE-2021-25932 5.4 MediumJune 1, 2021
• opennms horizon, meridian, opennms +2 more OpenNMS Horizon vulnerable to XSS CVE-2021-25934 5.4 MediumMay 25, 2021
• opennms horizon, meridian, opennms +2 more In OpenNMS Horizon, versions opennms-17.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian,... CVE-2021-25935 5.4 MediumMay 25, 2021
• opennms horizon, meridian, opennms +2 more Cross-site Scripting in OpenNMS Horizon CVE-2021-25933 Fix available 4.8 MediumMay 20, 2021
• opennms horizon, meridian, opennms +2 more Cross-Site Request Forgery in OpenNMS Horizon CVE-2021-25931 Fix available 8.8 HighMay 20, 2021
• opennms horizon, meridian, opennms +2 more Cross-site Scripting in OpenNMS Horizon CVE-2021-25929 Fix available 4.8 MediumMay 20, 2021
• opennms horizon, meridian, opennms +2 more Cross-Site Request Forgery in OpenNMS Horizon CVE-2021-25930 Fix available 4.3 MediumMay 20, 2021
• opennms horizon, meridian, newts +2 more OpenNMS Horizon RCE via JEXL2 expression CVE-2021-3396 Fix available 8.8 HighFebruary 17, 2021
• juniper networks junos space, opennms +1 more Junos Space: OpenNMS is accessible via port 9443 CVE-2020-1652 5.6 MediumJuly 17, 2020
• opennms horizon, meridian +1 more OpenNMS Horizon RCE via Unsafe Deserialization CVE-2020-12760 Fix available 8.8 HighMay 11, 2020
• opennms horizon, meridian +1 more OpenNMS Horizon and Meridian allows HQL Injection in element/nodeList.htm (aka the... CVE-2020-11886 8.1 HighApril 17, 2020
• opennms OpenNMS has a default password of rtc for the rtc account, which makes it easier for remote... CVE-2015-7856 10.0 HighOctober 16, 2015
• opennms Multiple cross-site scripting (XSS) vulnerabilities in OpenNMS before 1.12.7 allow remote... CVE-2014-3960 4.3 MediumJune 4, 2014
• opennms Cross-site scripting (XSS) vulnerability in surveillanceView.htm in OpenNMS 1.5.94 allows remote... CVE-2008-6095 4.3 MediumFebruary 9, 2009