Vendor

    OpenNMS

    30 known vulnerabilities in products by OpenNMS, 0 of them actively exploited (CISA KEV).

    Key figures

    30

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in OpenNMS
    HighCVE-2020-12760

    Opennms Horizon: Deserialization of Untrusted Data

    		8.8
    HighCVE-2023-0872

    ROLE_REST can be used to escalate to ROLE_ADMIN via /rest/users

    also in 2 other products

    		8.2
    HighCVE-2021-3396

    OpenNMS Meridian: Improper Access Control

    		8.8
    HighCVE-2023-40315

    ROLE_FILESYSTEM_EDITOR Can Be Used To Escalate To ROLE_ADMIN

    also in 2 other products

    		5.3
    HighCVE-2020-11886

    OpenNMS Meridian: security vulnerability

    		8.1
    HighCVE-2021-25931

    OpenNMS: Cross-Site Request Forgery (CSRF)

    		8.8
    HighCVE-2023-40313

    Disable BeanShell Interpreter Remote Server Mode

    also in 2 other products

    		7.1
    HighCVE-2016-6556

    OpenNMS Stored XSS via SNMP Agent Data

    		7.1
    HighCVE-2016-6555

    OpenNMS Stored XSS via SNMP Trap Alerts

    		7.1
    MediumCVE-2023-40311

    Stored XSS in multiple JSP files in opennms/opennms

    also in 2 other products

    		6.7
    MediumCVE-2021-25934

    OpenNMS: Cross-Site Scripting (XSS)

    		5.4
    MediumCVE-2023-40312

    Reflected XSS in multiple JSP files in opennms/opennms

    also in 2 other products

    		6.7
    Not ratedCVE-2015-7856

    OpenNMS: security vulnerability

    		—
    MediumCVE-2021-25933

    OpenNMS: Cross-Site Scripting (XSS)

    		4.8
    MediumCVE-2023-0815

    Plaintext Password Present in the Web logs

    also in 2 other products

    		6.8
    MediumCVE-2021-25932

    OpenNMS: Cross-Site Scripting (XSS)

    		5.4
    MediumCVE-2021-25929

    OpenNMS: Cross-Site Scripting (XSS)

    		4.8
    MediumCVE-2021-25935

    OpenNMS: Cross-Site Scripting (XSS)

    		5.4
    CriticalCVE-2020-1652

    Junos Space: OpenNMS is accessible via port 9443

    also in 1 other product

    		5.6
    MediumCVE-2023-0846

    Unauthenticated, stored XSS in display of alarm reduction-key

    also in 2 other products

    		6.7
    Not ratedCVE-2014-3960

    OpenNMS: Cross-Site Scripting (XSS)

    		—
    MediumCVE-2023-0868

    Stealing Cookies using Reflected XSS via graph results

    also in 2 other products

    		6.7
    HighCVE-2023-0870

    Form Can Be Manipulated with Cross-Site Request Forgery (CSRF)

    also in 2 other products

    		8.1
    MediumCVE-2023-0871

    An XML External Entity injection vulnerability

    also in 2 other products

    		5.4
    MediumCVE-2023-0867

    Multiple stored and reflected Cross-site Scripting in webapp

    also in 2 other products

    		6.7

    All vulnerabilities in search

    Products

    Products by OpenNMS
    Meridian230
    Horizon220
    OpenNMS70