Login Request a demo
ME
Product
Meridian
by Opennms · last CVE Nov 16, 2023
23
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities23In the news0Timeline
Severity mix
Critical 0High 7Medium 16Low 0
Severity
All severities23Critical0High7Medium16Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Meridian to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-40313
8.8
1%
Aug 17
Disable BeanShell Interpreter Remote Server Mode
Affected: before 2020.1.38; 2021.1.0 before 2021.1.30; 2022.1.0 before 2022.1.19; 2023.1.0 before 2023.1.6
CVE-2021-25931
8.8
1%
May 20
In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1;…
Affected: 2015.1.0 before 2019.1.19; 2020.1.0 before 2020.1.7
CVE-2021-3396
8.8
2%
Feb 17
OpenNMS Meridian 2016, 2017, 2018 before 2018.1.25, 2019 before 2019.1.16, and 2020 before 2020.1.5, Horizon 1.2 through 27.0.4, and Newts <1.5.3 has Incorrect Access Control,…
Affected: 2016.1.0 through 2016.1.24; 2017.1.0 through 2017.1.26; 2018.1.0 before 2018.1.25; 2019.1.0 before 2019.1.16; 2020.1.0 before 2020.1.5
CVE-2020-11886
8.1
1%
Apr 17
OpenNMS Horizon and Meridian allows HQL Injection in element/nodeList.htm (aka the NodeListController) via snmpParm or snmpParmValue to addCriteriaForSnmpParm
Affected: 2017 before 2017.1.21; 2018 before 2018.1.16; 2019 before 2019.1.4
CVE-2023-40612
8.0
0%
Aug 23
Authenticated XXE Injection Via The File Editor
Affected: 2023.0.0 before 2023.1.5
CVE-2023-40315
8.0
3%
Aug 17
ROLE_FILESYSTEM_EDITOR Can Be Used To Escalate To ROLE_ADMIN
Affected: 2023.0.0 before 2023.1.5
CVE-2023-0872
8.0
3%
Aug 14
ROLE_REST can be used to escalate to ROLE_ADMIN via /rest/users
Affected: 2020.0.0 through 2020.1.37; 2021.0.0 through 2021.1.29; 2022.0.0 through 2022.1.18; 2023.0.0 through 2023.1.5
CVE-2023-0870
6.7
0%
Mar 22
Form Can Be Manipulated with Cross-Site Request Forgery (CSRF)
Affected: 2020.1.0 before 2020.1.33; 2021.1.0 before 2021.1.25; 2022.1.0 before 2022.1.14; 2023.1.0
CVE-2023-0815
6.5
1%
Feb 23
Plaintext Password Present in the Web logs
Affected: before 2023.1.0
CVE-2023-40314
6.1
0%
Nov 16
Cross-site scripting in bootstrap.jsp
Affected: before 2023.1.9
CVE-2023-0871
6.1
1%
Aug 11
An XML External Entity injection vulnerability
Affected: 2020.0.0 before 2020.1.38; 2021.0.0 before 2021.1.30; 2022.1.0 before 2022.1.9; 2023.0.0 before 2023.1.6
CVE-2023-0867
6.1
0%
Feb 23
Multiple stored and reflected Cross-site Scripting in webapp
Affected: before 2023.1.0
CVE-2023-0868
6.1
0%
Feb 23
Stealing Cookies using Reflected XSS via graph results
Affected: before 2023.1.0
CVE-2023-0869
6.1
0%
Feb 23
Cross-site scripting in outage/list.htm
Affected: before 2023.1.0
CVE-2023-0846
6.1
0%
Feb 22
Unauthenticated, stored XSS in display of alarm reduction-key
Affected: before 2023.1.0
CVE-2021-25932
5.4
1%
Jun 1
In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1;…
Affected: 2015.1.0-1 through 2019.1.18-1; 2020.1.0-1 through 2020.1.6-1
CVE-2021-25935
5.4
1%
May 25
In OpenNMS Horizon, versions opennms-17.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1;…
Affected: 2015.1.0 through 2019.1.18; 2020.1.0 through 2020.1.7
CVE-2021-25934
5.4
1%
May 25
In OpenNMS Horizon, versions opennms-18.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1;…
Affected: 2015.1.0 through 2019.1.18; 2020.1.0 through 2020.1.7
CVE-2023-40312
5.2
1%
Aug 14
Reflected XSS in multiple JSP files in opennms/opennms
Affected: before 2020.1.38; 2022.1.0 before 2022.1.19; 2023.1.0 before 2023.1.6
CVE-2023-40311
4.8
1%
Aug 14
Stored XSS in multiple JSP files in opennms/opennms
Affected: before 2020.1.38; 2022.1.0 before 2022.1.19; 2023.1.0 before 2023.1.6
CVE-2021-25933
4.8
1%
May 20
In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1;…
Affected: 2015.1.0 before 2019.1.19; 2020.1.0 before 2020.1.7
CVE-2021-25929
4.8
1%
May 20
In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1;…
Affected: 2015.1.0 before 2019.1.19; 2020.1.0 before 2020.1.7
CVE-2021-25930
4.3
1%
May 20
In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1;…
Affected: 2015.1.0 before 2019.1.19; 2020.1.0 before 2020.1.7
Showing 23