Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Priority LOW 24

Cross-site scripting (XSS) vulnerability in web/springframework/security/SecurityAuthenticationEventOnmsEventBuilder.java in OpenNMS 1.8.x before 1.8.17, 1.9.93 and earlier, and 1.10.x before 1.10.1 allows remote attacke…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02084 Published 2012-01-29 No fix listed CWE-79
Priority LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in OpenNMS before 1.5.94 allow remote attackers to inject arbitrary web script or HTML via (1) the j_username parameter to j_acegi_security_check, (2) the username para…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01865 Published 2008-09-29 No fix listed CWE-79