Skip to contentOpennms Horizon vulnerabilities
- opennms horizon, meridian +1 moreCross-site scripting in bootstrap.jspCVE-2023-40314Fix available5.8 Medium
- opennms horizon, meridian +1 moreAuthenticated XXE Injection Via The File EditorCVE-2023-406125.3 Medium
- opennms horizon, meridian +1 moreROLE_FILESYSTEM_EDITOR Can Be Used To Escalate To ROLE_ADMINCVE-2023-40315Public exploitFix available5.3 Medium
- opennms horizon, meridian +1 moreDisable BeanShell Interpreter Remote Server ModeCVE-2023-40313Fix available7.1 High
- opennms horizon, meridian +1 moreReflected XSS in multiple JSP files in opennms/opennmsCVE-2023-40312Fix available6.7 Medium
- opennms horizon, meridian +1 moreStored XSS in multiple JSP files in opennms/opennmsCVE-2023-40311Fix available6.7 Medium
- opennms horizon, meridian +1 moreROLE_REST can be used to escalate to ROLE_ADMIN via /rest/usersCVE-2023-0872Public exploitFix available8.2 High
- opennms horizon, meridian +1 moreAn XML External Entity injection vulnerabilityCVE-2023-0871Fix available5.4 Medium
- opennms horizon, meridian +1 moreForm Can Be Manipulated with Cross-Site Request Forgery (CSRF)CVE-2023-0870Fix available8.1 High
- opennms horizon, meridian +1 morePlaintext Password Present in the Web logsCVE-2023-0815Fix available6.8 Medium
- opennms horizon, meridian +1 moreMultiple stored and reflected Cross-site Scripting in webappCVE-2023-0867Fix available6.7 Medium
- opennms horizon, meridian +1 moreStealing Cookies using Reflected XSS via graph resultsCVE-2023-0868Fix available6.7 Medium
- opennms horizon, meridian +1 moreCross-site scripting in outage/list.htmCVE-2023-08695.8 Medium
- opennms horizon, meridian +1 moreUnauthenticated, stored XSS in display of alarm reduction-keyCVE-2023-0846Fix available6.7 Medium
- opennms horizon, meridian, opennms +2 moreOpenNMS Horizon vulnerable to XSSCVE-2021-259345.4 Medium
- opennms horizon, meridian, opennms +2 moreIn OpenNMS Horizon, versions opennms-17.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian,...CVE-2021-259355.4 Medium
- opennms horizon, meridian, opennms +2 moreCross-site Scripting in OpenNMS HorizonCVE-2021-25933Fix available4.8 Medium
- opennms horizon, meridian, opennms +2 moreCross-Site Request Forgery in OpenNMS HorizonCVE-2021-25931Fix available8.8 High
- opennms horizon, meridian, opennms +2 moreCross-site Scripting in OpenNMS HorizonCVE-2021-25929Fix available4.8 Medium
- opennms horizon, meridian, opennms +2 moreCross-Site Request Forgery in OpenNMS HorizonCVE-2021-25930Fix available4.3 Medium
- opennms horizon, meridian, newts +2 moreOpenNMS Horizon RCE via JEXL2 expressionCVE-2021-3396Fix available8.8 High
- opennms horizon, meridian +1 moreOpenNMS Horizon RCE via Unsafe DeserializationCVE-2020-12760Fix available8.8 High
- opennms horizon, meridian +1 moreOpenNMS Horizon and Meridian allows HQL Injection in element/nodeList.htm (aka the...CVE-2020-118868.1 High