HO
Product
Horizon
22
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 7Medium 15Low 0
Watch
Add Horizon to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-40313 | 8.8 | Aug 17 | Disable BeanShell Interpreter Remote Server Mode Affected: before 32.0.2 |
| CVE-2021-25931 | 8.8 | May 20 | In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1;… Affected: 1.0 before 27.1.1 |
| CVE-2021-3396 | 8.8 | Feb 17 | OpenNMS Meridian 2016, 2017, 2018 before 2018.1.25, 2019 before 2019.1.16, and 2020 before 2020.1.5, Horizon 1.2 through 27.0.4, and Newts <1.5.3 has Incorrect Access Control,… Affected: 16.0.0 through 27.0.3 |
| CVE-2020-11886 | 8.1 | Apr 17 | OpenNMS Horizon and Meridian allows HQL Injection in element/nodeList.htm (aka the NodeListController) via snmpParm or snmpParmValue to addCriteriaForSnmpParm Affected: before 25.2.1 |
| CVE-2023-40612 | 8.0 | Aug 23 | Authenticated XXE Injection Via The File Editor Affected: 31.0.8 before 32.0.2 |
| CVE-2023-40315 | 8.0 | Aug 17 | ROLE_FILESYSTEM_EDITOR Can Be Used To Escalate To ROLE_ADMIN Affected: 31.0.8 before 32.0.2 |
| CVE-2023-0872 | 8.0 | Aug 14 | ROLE_REST can be used to escalate to ROLE_ADMIN via /rest/users Affected: 31.0.8 before 32.0.2 |
Showing 7