Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: The OpenNMS Group Meridian 2023.1.0 Clear all filters
TI-2023-00823 CVE-2023-0868 · GHSA-g57g-rvpg-2f2c

Stealing Cookies using Reflected XSS via graph results

Priority LOW 30

Reflected cross-site scripting in graph results in multiple versions of OpenNMS Meridian and Horizon could allow an attacker access to steal session cookies.

CVSS 3.1MEDIUM 6.7 Adjacent network Low privileges User interaction EPSS 0.00442 Published 2023-02-23 Fixed in 31.0.4 CWE-20
TI-2023-00824 CVE-2023-0869 · GHSA-7v39-jjj6-j4j4

Improper input validation in OpenNMS Group Meridian

Priority LOW 27

Cross-site scripting in outage/list.htm in multiple versions of OpenNMS Meridian and Horizon allows an attacker access to confidential session information.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00408 Published 2023-02-23 Fixed CWE-20