EUVD-2022-3490

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

OpenNMS Meridian and Horizon versions have access control flaws allowing code execution risks

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2021-3396	18 Feb 202100:49	–	circl
CNNVD	Tarus Balog OpenNMS Meridian Security Vulnerability	17 Feb 202100:00	–	cnnvd
CVE	CVE-2021-3396	17 Feb 202120:13	–	cve
Cvelist	CVE-2021-3396	17 Feb 202120:13	–	cvelist
Github Security Blog	OpenNMS Horizon RCE via JEXL2 expression	24 May 202217:42	–	github
NCSC	Vulnerabilities fixed in Juniper Junos Space	19 Apr 202100:00	–	ncsc
NVD	CVE-2021-3396	17 Feb 202121:15	–	nvd
OSV	CVE-2021-3396	17 Feb 202121:15	–	osv
OSV	GHSA-C3MP-9VX3-2RVV OpenNMS Horizon RCE via JEXL2 expression	24 May 202217:42	–	osv
Prion	Remote code execution	17 Feb 202121:15	–	prion

[
  {
    "enisaIdVendor": [
      {
        "id": "93f61df8-4959-3010-8e8c-5cebd8c2c934",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "8903f27a-a2ef-33ec-9663-b065f8712343",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-3396
github	www.github.com/OpenNMS/opennms/pull/3281
issues	www.issues.opennms.org/browse/NMS-13103
opennms	www.opennms.com/en/blog/2021-02-16-cve-2021-3396-full-security-disclosure
opennms	www.opennms.com/en/blog/2021-02-16-cve-2021-3396-full-security-disclosure/

03 Oct 2025 20:07Current

9.1High risk

Vulners AI Score9.1

CVSS 3.18.8

CVSS 26.5

EPSS0.02431