Filter
Versions
OpenNMS MeridianOpenNMS Meridian 2016, 2017, 2018 before 2018.1.25, 2019 before 2019.1.16, and 2020 before 2020.1.5,…
8.8
First published (updated )
OpenNMS MeridianAn XML External Entity injection vulnerability
8.8
First published (updated )
OpenNMS MeridianDisable BeanShell Interpreter Remote Server Mode
8.8
First published (updated )
OpenNMS MeridianROLE_REST can be used to escalate to ROLE_ADMIN via /rest/users
8.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
OpenNMS MeridianForm Can Be Manipulated with Cross-Site Request Forgery (CSRF)
8.1
First published (updated )
OpenNMS HorizonROLE_FILESYSTEM_EDITOR Can Be Used To Escalate To ROLE_ADMIN
8
First published (updated )
OpenNMS HorizonAuthenticated XXE Injection Via The File Editor
8
First published (updated )
OpenNMS HorizonPlaintext Password Present in the Web logs
6.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
OpenNMS HorizonUnauthenticated, stored XSS in display of alarm reduction-key
6.7
First published (updated )
OpenNMS HorizonStealing Cookies using Reflected XSS via graph results
6.7
First published (updated )
OpenNMS HorizonMultiple stored and reflected Cross-site Scripting in webapp
6.7
First published (updated )
OpenNMS MeridianStored XSS in multiple JSP files in opennms/opennms
6.7
First published (updated )
OpenNMS MeridianReflected XSS in multiple JSP files in opennms/opennms
6.7
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
OpenNMS HorizonCross-site scripting in outage/list.htm
6.1
First published (updated )
OpenNMS HorizonCross-site scripting in bootstrap.jsp
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.