Login Request a demo
ME
Product
Meridian
by Opennms · last CVE Nov 16, 2023
23
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities23In the news0Timeline
Severity mix
Critical 0High 7Medium 16Low 0
Severity
All severities23Critical0High7Medium16Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Meridian to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-40313
8.8
1%
Aug 17
Disable BeanShell Interpreter Remote Server Mode
Affected: before 2020.1.38; 2021.1.0 before 2021.1.30; 2022.1.0 before 2022.1.19; 2023.1.0 before 2023.1.6
CVE-2021-25931
8.8
1%
May 20
In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1;…
Affected: 2015.1.0 before 2019.1.19; 2020.1.0 before 2020.1.7
CVE-2021-3396
8.8
2%
Feb 17
OpenNMS Meridian 2016, 2017, 2018 before 2018.1.25, 2019 before 2019.1.16, and 2020 before 2020.1.5, Horizon 1.2 through 27.0.4, and Newts <1.5.3 has Incorrect Access Control,…
Affected: 2016.1.0 through 2016.1.24; 2017.1.0 through 2017.1.26; 2018.1.0 before 2018.1.25; 2019.1.0 before 2019.1.16; 2020.1.0 before 2020.1.5
CVE-2020-11886
8.1
1%
Apr 17
OpenNMS Horizon and Meridian allows HQL Injection in element/nodeList.htm (aka the NodeListController) via snmpParm or snmpParmValue to addCriteriaForSnmpParm
Affected: 2017 before 2017.1.21; 2018 before 2018.1.16; 2019 before 2019.1.4
CVE-2023-40612
8.0
0%
Aug 23
Authenticated XXE Injection Via The File Editor
Affected: 2023.0.0 before 2023.1.5
CVE-2023-40315
8.0
3%
Aug 17
ROLE_FILESYSTEM_EDITOR Can Be Used To Escalate To ROLE_ADMIN
Affected: 2023.0.0 before 2023.1.5
CVE-2023-0872
8.0
3%
Aug 14
ROLE_REST can be used to escalate to ROLE_ADMIN via /rest/users
Affected: 2020.0.0 through 2020.1.37; 2021.0.0 through 2021.1.29; 2022.0.0 through 2022.1.18; 2023.0.0 through 2023.1.5
Showing 7