Skip to contentThe Opennms Group Horizon vulnerabilities
- openstack horizon, the opennms group meridian +1 moreOpenNMS reflected cross-site scripting in the web UI via request parametersCVE-2026-1272356.1 Medium
- openstack horizon, the opennms group meridian +1 moreOpenNMS argument injection in ad-hoc RRD graphsCVE-2026-1272365.4 Medium
- openstack horizon, the opennms group meridian +1 moreOpenNMS denial of service via XML entity expansionCVE-2026-1112526.5 Medium
- openstack horizon, the opennms group meridian +1 moreOpenNMS REST authorization bypass via non-canonical HTTP methodCVE-2026-1112359.1 Critical
- openstack horizon, the opennms group meridian +1 moreOpenNMS SQL injection in shipped Asset Management JasperReports via the DATE_FORMAT parameter (ROLE_USER)CVE-2026-890896.5 Medium
- openstack horizon, the opennms group meridian +1 moreOpenNMS XML collector XXE allows arbitrary file read from the OpenNMS hostCVE-2026-195965.9 Medium
- openstack horizonOpenNMS missing authorization on /api/v2 PATCH endpoints allows unauthenticated configuration changesCVE-2026-890548.2 High
- openstack horizon, the opennms group meridian +1 moreOpenNMS v2 Alarm REST API inverted authorization check lets ROLE_REST users acknowledge alarms as any user and bypass read-onlyCVE-2026-191824.3 Medium
- openstack horizon, the opennms group meridian +1 moreOpenNMS JEXL sandbox bypass in Measurements REST API allows ROLE_USER to load arbitrary classesCVE-2026-191355.4 Medium
- openstack horizon, the opennms group meridian +1 moreSQLi in OpenNMS Horizon and MeridianCVE-2025-531226.9 Medium
- openstack horizon, the opennms group meridian +1 moreStored XSS in multiple 33.0.8files in opennms/opennmsCVE-2025-531216.9 Medium
- opennms horizon, meridian +1 moreCross-site scripting in bootstrap.jspCVE-2023-40314Fix available5.8 Medium
- opennms horizon, meridian +1 moreAuthenticated XXE Injection Via The File EditorCVE-2023-406125.3 Medium
- opennms horizon, meridian +1 moreROLE_FILESYSTEM_EDITOR Can Be Used To Escalate To ROLE_ADMINCVE-2023-40315Public exploitFix available5.3 Medium
- opennms horizon, meridian +1 moreDisable BeanShell Interpreter Remote Server ModeCVE-2023-40313Fix available7.1 High
- opennms horizon, meridian +1 moreReflected XSS in multiple JSP files in opennms/opennmsCVE-2023-40312Fix available6.7 Medium
- opennms horizon, meridian +1 moreStored XSS in multiple JSP files in opennms/opennmsCVE-2023-40311Fix available6.7 Medium
- opennms horizon, meridian +1 moreROLE_REST can be used to escalate to ROLE_ADMIN via /rest/usersCVE-2023-0872Public exploitFix available8.2 High
- opennms horizon, meridian +1 moreAn XML External Entity injection vulnerabilityCVE-2023-0871Fix available5.4 Medium
- opennms horizon, meridian +1 moreForm Can Be Manipulated with Cross-Site Request Forgery (CSRF)CVE-2023-0870Fix available8.1 High
- opennms horizon, meridian +1 morePlaintext Password Present in the Web logsCVE-2023-0815Fix available6.8 Medium
- opennms horizon, meridian +1 moreMultiple stored and reflected Cross-site Scripting in webappCVE-2023-0867Fix available6.7 Medium
- opennms horizon, meridian +1 moreStealing Cookies using Reflected XSS via graph resultsCVE-2023-0868Fix available6.7 Medium
- opennms horizon, meridian +1 moreCross-site scripting in outage/list.htmCVE-2023-08695.8 Medium
- opennms horizon, meridian +1 moreUnauthenticated, stored XSS in display of alarm reduction-keyCVE-2023-0846Fix available6.7 Medium