OpenNMS kayıtları

opennms üreticisine ait 30 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 2 · %6,7
Pre-auth RCE: 1
Düzeltme kaydı olan: %73,3
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

30 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
41Planlayın	CVE-2015-7856İstismar yok	OpenNMS has a default password of rtc for the rtc account, which makes it easier for remote attackers to obtain access by leveraging knowledopennms · opennms · CWE-255 Kimlik doğrulamasız Gömülü kimlik bilgisi	Kritik10,0	—	%2,4	16 Eki 2015
39İzleyin	CVE-2020-1652İstismar yok	Junos Space: OpenNMS is accessible via port 9443opennms · opennms · CWE-213 Kimlik doğrulamasız	Kritik9,8	—	%0,7	17 Tem 2020
36İzleyin	CVE-2020-12760İstismar yok	An issue was discovered in OpenNMS Horizon before 26.0.1, and Meridian before 2018.1.19 and 2019 before 2019.1.7.opennms · opennms horizon · CWE-502 RCE Deserializasyon	Yüksek8,8	—	%3,5	11 May 2020
36İzleyin	CVE-2021-3396İstismar yok	OpenNMS Meridian 2016, 2017, 2018 before 2018.1.25, 2019 before 2019.1.16, and 2020 before 2020.1.5, Horizon 1.2 through 27.0.4, and Newts <opennms · horizon RCE	Yüksek8,8	—	%2,4	17 Şub 2021
35İzleyin	CVE-2023-40313İstismar yok	Disable BeanShell Interpreter Remote Server Modeopennms · horizon · CWE-94 pre-auth RCE	Yüksek8,8	—	%0,8	17 Ağu 2023
35İzleyin	CVE-2021-25931İstismar yok	In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through opennms · horizon · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,7	20 May 2021
33İzleyin	CVE-2023-0872Silahlaştırılmış	ROLE_REST can be used to escalate to ROLE_ADMIN via /rest/usersopennms · horizon · CWE-269	Yüksek8,0	—	%3,3	14 Ağu 2023
33İzleyin	CVE-2023-40315Silahlaştırılmış	ROLE_FILESYSTEM_EDITOR Can Be Used To Escalate To ROLE_ADMINopennms · horizon · CWE-863 Erişim denetimi (IDOR)	Yüksek8,0	—	%2,9	17 Ağu 2023
32İzleyin	CVE-2020-11886İstismar yok	OpenNMS Horizon and Meridian allows HQL Injection in element/nodeList.htm (aka the NodeListController) via snmpParm or snmpParmValue to addCopennms · horizon · CWE-89 SQL enjeksiyonu	Yüksek8,1	—	%1,4	17 Nis 2020
32İzleyin	CVE-2023-40612İstismar yok	Authenticated XXE Injection Via The File Editoropennms · horizon · CWE-91 XXE	Yüksek8,0	—	%0,4	23 Ağu 2023
26İzleyin	CVE-2023-0815İstismar yok	Plaintext Password Present in the Web logsopennms · horizon · CWE-532 Bilgi sızıntısı	Orta6,5	—	%0,6	23 Şub 2023
26İzleyin	CVE-2023-0870İstismar yok	Form Can Be Manipulated with Cross-Site Request Forgery (CSRF)opennms · horizon · CWE-352 CSRF	Orta6,7	—	%0,3	22 Mar 2023
24İzleyin	CVE-2016-6555İstismar yok	OpenNMS Stored XSS via SNMP Trap Alertsopennms · opennms · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,8	24 Eyl 2021
24İzleyin	CVE-2016-6556İstismar yok	OpenNMS Stored XSS via SNMP Agent Dataopennms · opennms · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,8	24 Eyl 2021
24İzleyin	CVE-2023-0871İstismar yok	An XML External Entity injection vulnerabilityopennms · horizon · CWE-611 Kimlik doğrulamasız XXE	Orta6,1	—	%0,5	11 Ağu 2023
24İzleyin	CVE-2023-0846İstismar yok	Unauthenticated, stored XSS in display of alarm reduction-keyopennms · horizon · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,5	22 Şub 2023
24İzleyin	CVE-2023-0868İstismar yok	Stealing Cookies using Reflected XSS via graph resultsopennms · horizon · CWE-20 Kimlik doğrulamasız XSS	Orta6,1	—	%0,4	23 Şub 2023
24İzleyin	CVE-2023-40314İstismar yok	Cross-site scripting in bootstrap.jspopennms · horizon · CWE-20 Kimlik doğrulamasız XSS	Orta6,1	—	%0,4	16 Kas 2023
24İzleyin	CVE-2023-0867İstismar yok	Multiple stored and reflected Cross-site Scripting in webappopennms · horizon · CWE-20 Kimlik doğrulamasız XSS	Orta6,1	—	%0,4	23 Şub 2023
24İzleyin	CVE-2023-0869İstismar yok	Cross-site scripting in outage/list.htmopennms · horizon · CWE-20 Kimlik doğrulamasız XSS	Orta6,1	—	%0,4	23 Şub 2023
21İzleyin	CVE-2021-25934İstismar yok	In OpenNMS Horizon, versions opennms-18.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meopennms · horizon · CWE-79 XSS	Orta5,4	—	%1,0	25 May 2021
21İzleyin	CVE-2021-25932İstismar yok	In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through opennms · meridian · CWE-79 XSS	Orta5,4	—	%0,9	1 Haz 2021
21İzleyin	CVE-2021-25935İstismar yok	In OpenNMS Horizon, versions opennms-17.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meopennms · horizon · CWE-79 XSS	Orta5,4	—	%0,9	25 May 2021
20İzleyin	CVE-2023-40312İstismar yok	Reflected XSS in multiple JSP files in opennms/opennmsopennms · horizon · CWE-79 Kimlik doğrulamasız XSS	Orta5,2	—	%0,6	14 Ağu 2023
19İzleyin	CVE-2021-25933İstismar yok	In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through opennms · horizon · CWE-79 XSS	Orta4,8	—	%1,0	20 May 2021

CVE-2015-7856
41Planlayın
OpenNMS has a default password of rtc for the rtc account, which makes it easier for remote attackers to obtain access by leveraging knowled
KritikCVSS 10,0İstismar yokEPSS %2
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
opennms · opennms16 Eki 2015
CVE-2020-1652
39İzleyin
Junos Space: OpenNMS is accessible via port 9443
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
opennms · opennms17 Tem 2020
CVE-2020-12760
36İzleyin
An issue was discovered in OpenNMS Horizon before 26.0.1, and Meridian before 2018.1.19 and 2019 before 2019.1.7.
YüksekCVSS 8,8İstismar yokEPSS %3
- RCE
- Deserializasyon
opennms · opennms horizon11 May 2020
CVE-2021-3396
36İzleyin
OpenNMS Meridian 2016, 2017, 2018 before 2018.1.25, 2019 before 2019.1.16, and 2020 before 2020.1.5, Horizon 1.2 through 27.0.4, and Newts <
YüksekCVSS 8,8İstismar yokEPSS %2
- RCE
opennms · horizon17 Şub 2021
CVE-2023-40313
35İzleyin
Disable BeanShell Interpreter Remote Server Mode
YüksekCVSS 8,8İstismar yokEPSS %1
- pre-auth RCE
opennms · horizon17 Ağu 2023
CVE-2021-25931
35İzleyin
In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through
YüksekCVSS 8,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- CSRF
opennms · horizon20 May 2021
CVE-2023-0872
33İzleyin
ROLE_REST can be used to escalate to ROLE_ADMIN via /rest/users
YüksekCVSS 8,0SilahlaştırılmışEPSS %3
opennms · horizon14 Ağu 2023
CVE-2023-40315
33İzleyin
ROLE_FILESYSTEM_EDITOR Can Be Used To Escalate To ROLE_ADMIN
YüksekCVSS 8,0SilahlaştırılmışEPSS %3
- Erişim denetimi (IDOR)
opennms · horizon17 Ağu 2023
CVE-2020-11886
32İzleyin
OpenNMS Horizon and Meridian allows HQL Injection in element/nodeList.htm (aka the NodeListController) via snmpParm or snmpParmValue to addC
YüksekCVSS 8,1İstismar yokEPSS %1
- SQL enjeksiyonu
opennms · horizon17 Nis 2020
CVE-2023-40612
32İzleyin
Authenticated XXE Injection Via The File Editor
YüksekCVSS 8,0İstismar yokEPSS %0
- XXE
opennms · horizon23 Ağu 2023
CVE-2023-0815
26İzleyin
Plaintext Password Present in the Web logs
OrtaCVSS 6,5İstismar yokEPSS %1
- Bilgi sızıntısı
opennms · horizon23 Şub 2023
CVE-2023-0870
26İzleyin
Form Can Be Manipulated with Cross-Site Request Forgery (CSRF)
OrtaCVSS 6,7İstismar yokEPSS %0
- CSRF
opennms · horizon22 Mar 2023
CVE-2016-6555
24İzleyin
OpenNMS Stored XSS via SNMP Trap Alerts
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
opennms · opennms24 Eyl 2021
CVE-2016-6556
24İzleyin
OpenNMS Stored XSS via SNMP Agent Data
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
opennms · opennms24 Eyl 2021
CVE-2023-0871
24İzleyin
An XML External Entity injection vulnerability
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XXE
opennms · horizon11 Ağu 2023
CVE-2023-0846
24İzleyin
Unauthenticated, stored XSS in display of alarm reduction-key
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
opennms · horizon22 Şub 2023
CVE-2023-0868
24İzleyin
Stealing Cookies using Reflected XSS via graph results
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
opennms · horizon23 Şub 2023
CVE-2023-40314
24İzleyin
Cross-site scripting in bootstrap.jsp
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
opennms · horizon16 Kas 2023
CVE-2023-0867
24İzleyin
Multiple stored and reflected Cross-site Scripting in webapp
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
opennms · horizon23 Şub 2023
CVE-2023-0869
24İzleyin
Cross-site scripting in outage/list.htm
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
opennms · horizon23 Şub 2023
CVE-2021-25934
21İzleyin
In OpenNMS Horizon, versions opennms-18.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through me
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
opennms · horizon25 May 2021
CVE-2021-25932
21İzleyin
In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
opennms · meridian1 Haz 2021
CVE-2021-25935
21İzleyin
In OpenNMS Horizon, versions opennms-17.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through me
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
opennms · horizon25 May 2021
CVE-2023-40312
20İzleyin
Reflected XSS in multiple JSP files in opennms/opennms
OrtaCVSS 5,2İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
opennms · horizon14 Ağu 2023
CVE-2021-25933
19İzleyin
In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
opennms · horizon20 May 2021