Lucene search
+L

CVE-2023-40315

🗓️ 17 Aug 2023 19:04:01Reported by OpenNMSType 
cve
 cve
🔗 web.nvd.nist.gov👁 93 Views

OpenMNS Horizon 31.0.8 & earlier versions allow privilege escalation. Upgrade to Meridian 2023.1.5 or Horizon 32.0.2+

Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
zdt
zdt
OpenNMS Horizon 31.0.7 Remote Command Execution Exploit
27 Mar 202400:00
–zdt
circl
Circl
CVE-2023-40315
18 Aug 202310:27
–circl
cnnvd
CNNVD
Opennms Group OpenNMS 安全漏洞
17 Aug 202300:00
–cnnvd
cvelist
Cvelist
CVE-2023-40315 ROLE_FILESYSTEM_EDITOR Can Be Used To Escalate To ROLE_ADMIN
17 Aug 202319:04
–cvelist
euvd
EUVD
EUVD-2023-2300
3 Oct 202520:07
–euvd
github
Github Security Blog
OpenNMS privilege escalation vulnerability
17 Aug 202321:30
–github
mend
Mend
CVE-2023-40315
17 Aug 202319:04
–mend
metasploit
Metasploit
OpenNMS Horizon Authenticated RCE
1 Jul 202300:00
–metasploit
nvd
NVD
CVE-2023-40315
17 Aug 202320:15
–nvd
openvas
OpenVAS
Moodle < 3.9.17, 3.11 < 3.11.10, 4.0 < 4.0.4 Multiple Vulnerabilities
10 Oct 202200:00
–openvas
Rows per page
NVD
Node
OR
opennmshorizonRange31.0.8–32.0.2
opennmsmeridianRange2023.0.0–2023.1.5
[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows",
      "MacOS",
      "Linux"
    ],
    "product": "Horizon",
    "repo": "https://github.com/OpenNMS/opennms",
    "vendor": "The OpenNMS Group",
    "versions": [
      {
        "lessThan": "32.0.2",
        "status": "affected",
        "version": "31.0.8",
        "versionType": "maven"
      },
      {
        "lessThan": "31.0.8",
        "status": "unknown",
        "version": "0",
        "versionType": "maven"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows",
      "MacOS",
      "Linux"
    ],
    "product": "Meridian",
    "repo": "https://github.com/OpenNMS/opennms",
    "vendor": "The OpenNMS Group",
    "versions": [
      {
        "lessThan": "2023.1.5",
        "status": "affected",
        "version": "2023.0.0",
        "versionType": "maven"
      },
      {
        "lessThan": "2023.0.0",
        "status": "unknown",
        "version": "0",
        "versionType": "maven"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 06:17Current
6.5Medium risk
Vulners AI Score6.5
CVSS 3.15.3 - 8
EPSS0.0285
SSVC
93