Login Request a demo
ME
Product
Meridian
by Opennms · last CVE Nov 16, 2023
23
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities23In the news0Timeline
Severity mix
Critical 0High 7Medium 16Low 0
Severity
All severities23Critical0High7Medium16Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Meridian to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-0870
6.7
0%
Mar 22
Form Can Be Manipulated with Cross-Site Request Forgery (CSRF)
Affected: 2020.1.0 before 2020.1.33; 2021.1.0 before 2021.1.25; 2022.1.0 before 2022.1.14; 2023.1.0
CVE-2023-0815
6.5
1%
Feb 23
Plaintext Password Present in the Web logs
Affected: before 2023.1.0
CVE-2023-40314
6.1
0%
Nov 16
Cross-site scripting in bootstrap.jsp
Affected: before 2023.1.9
CVE-2023-0871
6.1
1%
Aug 11
An XML External Entity injection vulnerability
Affected: 2020.0.0 before 2020.1.38; 2021.0.0 before 2021.1.30; 2022.1.0 before 2022.1.9; 2023.0.0 before 2023.1.6
CVE-2023-0867
6.1
0%
Feb 23
Multiple stored and reflected Cross-site Scripting in webapp
Affected: before 2023.1.0
CVE-2023-0868
6.1
0%
Feb 23
Stealing Cookies using Reflected XSS via graph results
Affected: before 2023.1.0
CVE-2023-0869
6.1
0%
Feb 23
Cross-site scripting in outage/list.htm
Affected: before 2023.1.0
CVE-2023-0846
6.1
0%
Feb 22
Unauthenticated, stored XSS in display of alarm reduction-key
Affected: before 2023.1.0
CVE-2021-25932
5.4
1%
Jun 1
In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1;…
Affected: 2015.1.0-1 through 2019.1.18-1; 2020.1.0-1 through 2020.1.6-1
CVE-2021-25934
5.4
1%
May 25
In OpenNMS Horizon, versions opennms-18.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1;…
Affected: 2015.1.0 through 2019.1.18; 2020.1.0 through 2020.1.7
CVE-2021-25935
5.4
1%
May 25
In OpenNMS Horizon, versions opennms-17.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1;…
Affected: 2015.1.0 through 2019.1.18; 2020.1.0 through 2020.1.7
CVE-2023-40312
5.2
1%
Aug 14
Reflected XSS in multiple JSP files in opennms/opennms
Affected: before 2020.1.38; 2022.1.0 before 2022.1.19; 2023.1.0 before 2023.1.6
CVE-2023-40311
4.8
1%
Aug 14
Stored XSS in multiple JSP files in opennms/opennms
Affected: before 2020.1.38; 2022.1.0 before 2022.1.19; 2023.1.0 before 2023.1.6
CVE-2021-25933
4.8
1%
May 20
In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1;…
Affected: 2015.1.0 before 2019.1.19; 2020.1.0 before 2020.1.7
CVE-2021-25929
4.8
1%
May 20
In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1;…
Affected: 2015.1.0 before 2019.1.19; 2020.1.0 before 2020.1.7
CVE-2021-25930
4.3
1%
May 20
In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1;…
Affected: 2015.1.0 before 2019.1.19; 2020.1.0 before 2020.1.7
Showing 16