Skip to content
Noroxi

onosproject records

15 published records for vendor onosproject.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
6.7%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 23
  5. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

15 records
  • CVE-2017-1000081
    40Plan

    Linux foundation ONOS 1.9.0 is vulnerable to unauthenticated upload of applications (.oar) resulting in remote code execution.

    CriticalCVSS 9.8No exploitEPSS 3%

    onosproject · onosJul 17, 2017

  • CVE-2019-13624
    40Plan

    In ONOS 1.15.0, apps/yang/web/src/main/java/org/onosproject/yang/web/YangWebResource.java mishandles backquote characters within strings tha

    CriticalCVSS 9.8No exploitEPSS 2%

    onosproject · onosJul 16, 2019

  • CVE-2018-1000614
    39Monitor

    ONOS ONOS Controller version 1.13.1 and earlier contains a XML External Entity (XXE) vulnerability in providers/netconf/alarm/src/main/java/

    CriticalCVSS 9.8No exploitEPSS 2%

    onosproject · onosJul 9, 2018

  • CVE-2018-1000616
    39Monitor

    ONOS ONOS controller version 1.13.1 and earlier contains a XML External Entity (XXE) vulnerability in onos\drivers\utilities\src\main\java\o

    CriticalCVSS 9.8No exploitEPSS 1%

    onosproject · onosJul 9, 2018

  • CVE-2015-7516
    31Monitor

    ONOS before 1.5.0 when using the ifwd app allows remote attackers to cause a denial of service (NULL pointer dereference and switch disconne

    HighCVSS 7.5No exploitEPSS 4%

    onosproject · onosAug 24, 2017

  • CVE-2017-1000079
    30Monitor

    Linux foundation ONOS 1.9.0 is vulnerable to a DoS.

    HighCVSS 7.5No exploitEPSS 1%

    onosproject · onosJul 17, 2017

  • CVE-2018-1000615
    30Monitor

    ONOS ONOS Controller version 1.13.1 and earlier contains a Denial of Service (Service crash) vulnerability in OVSDB component in ONOS that c

    HighCVSS 7.5No exploitEPSS 1%

    onosproject · onosJul 9, 2018

  • CVE-2017-13763
    30Monitor

    ONOS versions 1.8.0, 1.9.0, and 1.10.0 do not restrict the amount of memory allocated.

    HighCVSS 7.5No exploitEPSS 1%

    onosproject · onosAug 29, 2017

  • CVE-2017-1000080
    30Monitor

    Linux foundation ONOS 1.9.0 allows unauthenticated use of websockets.

    HighCVSS 7.5No exploitEPSS 1%

    onosproject · onosJul 17, 2017

  • CVE-2024-34049
    30Monitor

    Open Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 has a slice bounds out-of-range panic in "return plmnIdString[0:3], plmnIdString[3:

    HighCVSS 7.5No exploitEPSS 1%

    onosproject · traffic steering xapplicationApr 29, 2024

  • CVE-2024-34050
    30Monitor

    Open Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 has a slice bounds out-of-range panic in "return uint64(b[2])<<16 | uint64(b[1])<<8

    HighCVSS 7.5No exploitEPSS 1%

    onosproject · traffic steering xapplicationApr 29, 2024

  • CVE-2018-12691
    27Monitor

    Time-of-check to time-of-use (TOCTOU) race condition in org.onosproject.acl (aka the access control application) in ONOS v1.13 and earlier a

    MediumCVSS 6.8No exploitEPSS 1%

    onosproject · onosJul 5, 2018

  • CVE-2017-13762
    24Monitor

    ONOS versions 1.8.0, 1.9.0, and 1.10.0 are vulnerable to XSS.

    MediumCVSS 6.1No exploitEPSS 1%

    onosproject · onosAug 29, 2017

  • CVE-2017-1000078
    24Monitor

    Linux foundation ONOS 1.9 is vulnerable to XSS in the device.

    MediumCVSS 6.1No exploitEPSS 1%

    onosproject · onosJul 17, 2017

  • CVE-2023-30093
    24Monitor

    A cross-site scripting (XSS) vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbi

    MediumCVSS 6.1No exploitEPSS 0%

    onosproject · onosMay 4, 2023