Skip to content
OpenAdvisories

Package · Maven

org.opennms:opennms

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.8
    CVE-2023-0815

    Plaintext Password Present in the Web logs

    Potential Insertion of Sensitive Information into Jetty Log Files in multiple versions of OpenNMS Meridian and Horizon could allow disclosure of usernames and passwords if the logging level is set to debug. Users should upgrade to Meridian 2023.1.0 or newer, …

    The OpenNMS Group Meridian Horizon org.opennms:opennms Maven
  • Medium 6.7
    CVE-2023-0867

    Multiple stored and reflected Cross-site Scripting in webapp

    Multiple stored and reflected cross-site scripting vulnerabilities in webapp jsp pages in multiple versions of OpenNMS Meridian and Horizon could allow an attacker access to confidential session information. Users should upgrade to Meridian 2023.1.0 or newer,…

    The OpenNMS Group Meridian Horizon org.opennms:opennms Maven
  • Medium 6.7
    CVE-2023-0846

    Unauthenticated, stored XSS in display of alarm reduction-key

    Unauthenticated, stored cross-site scripting in the display of alarm reduction keys in multiple versions of OpenNMS Horizon and Meridian could allow an attacker access to confidential session information. Users should upgrade to Meridian 2023.1.0 or newer, or…

    The OpenNMS Group Meridian Horizon org.opennms:opennms Maven
  • Medium —
    CVE-2021-25934

    OpenNMS Horizon vulnerable to XSS

    In OpenNMS Horizon, versions opennms-18.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.7-1 are vulnerable to …

    org.opennms:opennms Maven
  • Medium 4.8
    CVE-2021-25933

    Cross-site Scripting in OpenNMS Horizon

    In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable t…

    org.opennms:opennms Maven
  • Medium 4.8
    CVE-2021-25929

    Cross-site Scripting in OpenNMS Horizon

    In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable t…

    org.opennms:opennms Maven
  • Medium 4.3
    CVE-2021-25930

    Cross-Site Request Forgery in OpenNMS Horizon

    In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable t…

    org.opennms:opennms org.opennms:opennms-config Maven