Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: The OpenNMS Group Meridian 2024.2.6, 2024.2.7 Clear all filters
TI-2025-33112 CVE-2025-53122 · GHSA-gf77-whxf-fmrr

SQLi in OpenNMS Horizon and Meridian

Priority LOW 30

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in OpenNMS Horizon and Meridian applications allows SQL Injection.

CVSS 4.0MEDIUM 6.9 Adjacent network Low privileges No interaction EPSS 0.00216 Published 2025-06-26 Fixed CWE-89
TI-2025-33111 CVE-2025-53121 · GHSA-cjcp-5fq7-pgm2

Stored XSS in multiple 33.0.8files in opennms/opennms

Priority LOW 30

Multiple stored XSS were found on different nodes with unsanitized parameters in OpenMNS Horizon 33.0.8 and versions earlier than 33.1.6 on multiple platforms that allow an attacker to store on database and then inject H…

CVSS 4.0MEDIUM 6.9 Adjacent network Low privileges User interaction EPSS 0.00217 Published 2025-06-26 Fixed in 33.1.6, 33.1.7 +2 CWE-79