The OpenNMS Group

Records39All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high12CVSS 7.0–8.9

Exploited now

The OpenNMS Group records in CISA KEV

No The OpenNMS Group vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Meridian 23 records HIGH Horizon 22 records HIGH Opennms 7 records MEDIUM Newts 1 record MEDIUM Opennms Horizon 1 record MEDIUM Opennms Meridian 1 record MEDIUM

Records

7 records in Opennms · all components

TI-2015-06530 CVE-2015-7856 · GHSA-469j-c2x8-3w38

OpenNMS has a default password of rtc for the rtc account, which makes it easier for…

MEDIUM 48

OpenNMS has a default password of rtc for the rtc account, which makes it easier for remote attackers to obtain access by leveraging knowledge of the credentials.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02449 Published 2015-10-16 No fix listed CWE-255

TI-2020-01603 CVE-2020-1652 · GHSA-vf2p-4grj-v3x6

Junos Space: OpenNMS is accessible via port 9443

MEDIUM 43

OpenNMS is accessible via port 9443

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00744 Published 2020-07-17 Fixed in 20.1R1 CWE-213

TI-2016-05620 CVE-2016-6556 · GHSA-gg9p-hvqm-vj23

OpenNMS Stored XSS via SNMP Agent Data

LOW 33

OpenNMS version 18.0.1 and prior are vulnerable to a stored XSS issue due to insufficient filtering of SNMP agent supplied data.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00849 Published 2022-06-15 No fix listed CWE-79

TI-2016-05619 CVE-2016-6555 · GHSA-5mg8-9hx2-j7wf

OpenNMS Stored XSS via SNMP Trap Alerts

LOW 33

OpenNMS version 18.0.1 and prior are vulnerable to a stored XSS issue due to insufficient filtering of SNMP trap supplied data.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00849 Published 2022-06-15 No fix listed CWE-79

TI-2021-07942 CVE-2021-25932 · GHSA-78gg-3865-6f24

Cross-site scripting in OpenNMS

LOW 26

In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00926 Published 2021-06-01 No fix listed CWE-79

TI-2014-03229 CVE-2014-3960 · GHSA-6f28-hc9r-pqv2

Multiple cross-site scripting (XSS) vulnerabilities in OpenNMS before 1.12.7 allow remote…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in OpenNMS before 1.12.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01773 Published 2014-06-04 No fix listed CWE-79

TI-2008-05789 CVE-2008-6095 · GHSA-37qp-8fq8-ppq6

Cross-site scripting (XSS) vulnerability in surveillanceView.htm in OpenNMS 1.5.94 allows…

LOW 22

Cross-site scripting (XSS) vulnerability in surveillanceView.htm in OpenNMS 1.5.94 allows remote attackers to inject arbitrary web script or HTML via the viewName parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01107 Published 2009-02-09 No fix listed CWE-79

Open these records in search →

Critical	3
High	12
Medium	24
Low	0
No CVSS	0