Login Request a demo
OP
Product
OpenNMS
by OpenNMS · last CVE Sep 24, 2021
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 1High 0Medium 3Low 0
Severity
All severities7Critical1High0Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add OpenNMS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-1652
9.8
1%
Jul 17
OpenNMS is accessible via port 9443
Affected: All versions, or not specified
CVE-2016-6556
6.1
1%
Sep 24
OpenNMS Stored XSS via SNMP Agent Data
Affected: 18.0.1 through 18.0.1
CVE-2016-6555
6.1
1%
Sep 24
OpenNMS Stored XSS via SNMP Trap Alerts
Affected: 18.0.1 through 18.0.1
CVE-2021-25932
5.4
1%
Jun 1
In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1;…
Affected: 1.0 through 27.1.0-1
CVE-2015-7856
–
2%
Oct 16
OpenNMS has a default password of rtc for the rtc account, which makes it easier for remote attackers to obtain access by leveraging knowledge of the credentials
Affected: All versions, or not specified
CVE-2014-3960
–
2%
Jun 4
Multiple cross-site scripting (XSS) vulnerabilities in OpenNMS before 1.12.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors
Affected: through 1.12.6; 1.9.0; 1.9.1; 1.9.2; 1.9.3; 1.9.4; +34 more
CVE-2008-6095
–
1%
Feb 9
Cross-site scripting (XSS) vulnerability in surveillanceView.htm in OpenNMS 1.5.94 allows remote attackers to inject arbitrary web script or HTML via the viewName parameter
Affected: 1.5.94
Showing 7