High severity · published Apr 17, 2020
CVE-2020-11886
OpenNMS Horizon and Meridian allows HQL Injection in element/nodeList.htm (aka the NodeListController) via snmpParm or snmpParmValue to addCriteriaForSnmpParm
8.1
CVSS
1.4%
EPSS
No
On KEV
Description
OpenNMS Horizon and Meridian allows HQL Injection in element/nodeList.htm (aka the NodeListController) via snmpParm or snmpParmValue to addCriteriaForSnmpParm. This affects Horizon before 25.2.1, Meridian 2019 before 2019.1.4, Meridian 2018 before 2018.1.16, and Meridian 2017 before 2017.1.21.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HO
Horizon · Opennms
before 25.2.1 · source: NVD
ME
Meridian · Opennms
2017 before 2017.1.21; 2018 before 2018.1.16; 2019 before 2019.1.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-11886
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-11886
Vendor Advisory
https://issues.opennms.org/browse/NMS-12572
More from Horizon
8.8
CVE-2023-40313
Disable BeanShell Interpreter Remote Server Mode
8.8
CVE-2021-25931
In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1;…
8.8
CVE-2021-3396
OpenNMS Meridian 2016, 2017, 2018 before 2018.1.25, 2019 before 2019.1.16, and 2020 before 2020.1.5, Horizon 1.2 through 27.0.4, and Newts <1.5.3 has Incorrect Access Control,…
8.0
CVE-2023-40612
Authenticated XXE Injection Via The File Editor
8.0
CVE-2023-40315
ROLE_FILESYSTEM_EDITOR Can Be Used To Escalate To ROLE_ADMIN