CVE-2020-11886

2020-04-1720:15:12

Google

osv.dev

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

28.4%

JSON

OpenNMS Horizon and Meridian allows HQL Injection in element/nodeList.htm (aka the NodeListController) via snmpParm or snmpParmValue to addCriteriaForSnmpParm. This affects Horizon before 25.2.1, Meridian 2019 before 2019.1.4, Meridian 2018 before 2018.1.16, and Meridian 2017 before 2017.1.21.

References

issues.opennms.org/browse/NMS-12572