Skip to main content
← Maven

org.opennms:opennms

9 known vulnerabilities (1 high, 6 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
9 · 1 high, 6 medium
Registry
Maven Central

Advisories 9

  • CVE-2023-0815Medium 6.8

    Plaintext Password Present in the Web logs

    Affected: fixed in 31.0.4.

  • CVE-2023-0867Medium 6.7

    Multiple stored and reflected Cross-site Scripting in webapp

    Affected: fixed in 31.0.4.

  • CVE-2023-0846Medium 6.7

    Unauthenticated, stored XSS in display of alarm reduction-key

    Affected: fixed in 31.0.3.

  • In OpenNMS Horizon, versions opennms-18.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through…

    Affected: from 18.0.0-1, through 27.1.0-1.

  • CVE-2021-25933Medium 4.8

    In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1…

    Affected: from 1.0.0, fixed in 27.1.1.

  • In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1…

    Affected: from 1.0.0, fixed in 27.1.1.

  • CVE-2021-25929Medium 4.8

    In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1…

    Affected: from 1.0.0, fixed in 27.1.1.

  • CVE-2021-25930Medium 4.3

    In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1…

    Affected: from 1.0.0, fixed in 27.1.1.

  • OpenNMS Meridian 2016, 2017, 2018 before 2018.1.25, 2019 before 2019.1.16, and 2020 before 2020.1.5, Horizon 1.2 through 27.0.4, and Newts…

    Affected: from 16.0.0, fixed in 27.0.4.