the opennms group Summary
Latest vulnerabilities published by the opennms group
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
SQL Injection Flaw in OpenNMS Horizon and Meridian Applications
CVE-2025-53122The Opennms GroupHorizon6.9MEDIUMStored Cross-Site Scripting in OpenMNS Horizon by OpenNMS
CVE-2025-53121The Opennms GroupHorizon6.9MEDIUMCross-site scripting in bootstrap.jsp
CVE-2023-40314The Opennms GroupHorizon5.8MEDIUMAuthenticated XXE Injection Via The File Editor
CVE-2023-40612The Opennms GroupHorizon5.3MEDIUMROLE_FILESYSTEM_EDITOR Can Be Used To Escalate To ROLE_ADMIN
CVE-2023-40315The Opennms GroupHorizon👾🟡8HIGHDisable BeanShell Interpreter Remote Server Mode
CVE-2023-40313The Opennms GroupHorizon8.8HIGHROLE_REST can be used to escalate to ROLE_ADMIN via /rest/users
CVE-2023-0872The Opennms GroupHorizon👾🟡8.2HIGHStored XSS in multiple JSP files in opennms/opennms
CVE-2023-40311The Opennms GroupHorizon6.7MEDIUMReflected XSS in multiple JSP files in opennms/opennms
CVE-2023-40312The Opennms GroupHorizon6.7MEDIUMAn XML External Entity injection vulnerability
CVE-2023-0871The Opennms GroupHorizon5.4MEDIUMForm Can Be Manipulated with Cross-Site Request Forgery (CSRF)
CVE-2023-0870The Opennms GroupMeridian8.1HIGHPlaintext Password Present in the Web logs
CVE-2023-0815The Opennms GroupMeridian6.8MEDIUMMultiple stored and reflected Cross-site Scripting in webapp
CVE-2023-0867The OpenNMS GroupMeridian6.1MEDIUMStealing Cookies using Reflected XSS via graph results
CVE-2023-0868The OpenNMS GroupMeridian6.1MEDIUMCross-site scripting in outage/list.htm
CVE-2023-0869The OpenNMS Group Meridian6.1MEDIUMUnauthenticated, stored XSS in display of alarm reduction-key
CVE-2023-0846The OpenNMS Group Horizon6.1MEDIUM