Login Request a demo
OP
Vendor
Opennms
6 products with CVEs on record
55
CVEs
0
On KEV
0
New 30D
Products
ME
Meridian
Opennms
8.8
23 CVEs0 on KEV0 new
HO
Horizon
Opennms
8.8
22 CVEs0 on KEV0 new
OP
OpenNMS
OpenNMS
9.8
7 CVEs0 on KEV0 new
NE
Newts
Opennms
8.8
1 CVEs0 on KEV0 new
OH
Opennms Horizon
Opennms
8.8
1 CVEs0 on KEV0 new
OM
Opennms Meridian
Opennms
8.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2023-40314
ME
Meridian
Opennms
6.1
0%
Nov 16Cross-site scripting in bootstrap.jsp
CVE-2023-40612
ME
Meridian
Opennms
8.0
0%
Aug 23Authenticated XXE Injection Via The File Editor
CVE-2023-40315
HO
Horizon
Opennms
8.0
3%
Aug 17ROLE_FILESYSTEM_EDITOR Can Be Used To Escalate To ROLE_ADMIN
CVE-2023-40313
HO
Horizon
Opennms
8.8
1%
Aug 17Disable BeanShell Interpreter Remote Server Mode
CVE-2023-40312
ME
Meridian
Opennms
5.2
1%
Aug 14Reflected XSS in multiple JSP files in opennms/opennms
CVE-2023-40311
HO
Horizon
Opennms
4.8
1%
Aug 14Stored XSS in multiple JSP files in opennms/opennms
CVE-2023-0872
HO
Horizon
Opennms
8.0
3%
Aug 14ROLE_REST can be used to escalate to ROLE_ADMIN via /rest/users
CVE-2023-0871
ME
Meridian
Opennms
6.1
1%
Aug 11An XML External Entity injection vulnerability
CVE-2023-0870
HO
Horizon
Opennms
6.7
0%
Mar 22Form Can Be Manipulated with Cross-Site Request Forgery (CSRF)
CVE-2023-0815
HO
Horizon
Opennms
6.5
1%
Feb 23Plaintext Password Present in the Web logs
CVE-2023-0867
HO
Horizon
Opennms
6.1
0%
Feb 23Multiple stored and reflected Cross-site Scripting in webapp
CVE-2023-0868
HO
Horizon
Opennms
6.1
0%
Feb 23Stealing Cookies using Reflected XSS via graph results
CVE-2023-0869
ME
Meridian
Opennms
6.1
0%
Feb 23Cross-site scripting in outage/list.htm
CVE-2023-0846
HO
Horizon
Opennms
6.1
0%
Feb 22Unauthenticated, stored XSS in display of alarm reduction-key
CVE-2016-6556
OP
OpenNMS
OpenNMS
6.1
1%
Sep 24OpenNMS Stored XSS via SNMP Agent Data
CVE-2016-6555
OP
OpenNMS
OpenNMS
6.1
1%
Sep 24OpenNMS Stored XSS via SNMP Trap Alerts
CVE-2021-25932
OP
Opennms
Opennms
5.4
1%
Jun 1In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1;…
CVE-2021-25934
HO
Horizon
Opennms
5.4
1%
May 25In OpenNMS Horizon, versions opennms-18.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1;…
CVE-2021-25935
HO
Horizon
Opennms
5.4
1%
May 25In OpenNMS Horizon, versions opennms-17.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1;…
CVE-2021-25933
ME
Meridian
Opennms
4.8
1%
May 20In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1;…
CVE-2021-25931
HO
Horizon
Opennms
8.8
1%
May 20In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1;…
CVE-2021-25929
HO
Horizon
Opennms
4.8
1%
May 20In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1;…
CVE-2021-25930
HO
Horizon
Opennms
4.3
1%
May 20In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1;…
CVE-2021-3396
HO
Horizon
Opennms
8.8
2%
Feb 17OpenNMS Meridian 2016, 2017, 2018 before 2018.1.25, 2019 before 2019.1.16, and 2020 before 2020.1.5, Horizon 1.2 through 27.0.4, and Newts <1.5.3 has Incorrect Access Control,…
CVE-2020-1652
OP
Opennms
Opennms
9.8
1%
Jul 17OpenNMS is accessible via port 9443
CVE-2020-12760
OH
Opennms Horizon
Opennms
8.8
3%
May 11An issue was discovered in OpenNMS Horizon before 26.0.1, and Meridian before 2018.1.19 and 2019 before 2019.1.7
CVE-2020-11886
HO
Horizon
Opennms
8.1
1%
Apr 17OpenNMS Horizon and Meridian allows HQL Injection in element/nodeList.htm (aka the NodeListController) via snmpParm or snmpParmValue to addCriteriaForSnmpParm
CVE-2015-7856
OP
Opennms
Opennms
–
2%
Oct 16OpenNMS has a default password of rtc for the rtc account, which makes it easier for remote attackers to obtain access by leveraging knowledge of the credentials
CVE-2014-3960
OP
Opennms
Opennms
–
2%
Jun 4Multiple cross-site scripting (XSS) vulnerabilities in OpenNMS before 1.12.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors
CVE-2008-6095
OP
Opennms
Opennms
–
1%
Feb 9Cross-site scripting (XSS) vulnerability in surveillanceView.htm in OpenNMS 1.5.94 allows remote attackers to inject arbitrary web script or HTML via the viewName parameter