Opennms Group OpenNMS 跨站脚本漏洞

Opennms Group OpenNMS is an open source, enterprise-grade network monitoring and network management platform from US-based Opennms Group. A security vulnerability exists in Opennms Group OpenNMS Meridian and Horizon, which originates from a cross-site scripting vulnerability in the outage/list.ht...

PT-2023-16573 · Opennms · Opennms Meridian +1

Name of the Vulnerable Software and Affected Versions: OpenNMS Meridian versions prior to 2023.1.0 OpenNMS Horizon versions prior to 31.0.4 Description: Cross-site scripting in outage/list.htm allows an attacker access to confidential session information. The software is intended for installation...

Opennms Group OpenNMS 跨站脚本漏洞

Opennms Group OpenNMS is an open source, enterprise-class network monitoring and network management platform from the U.S.-based Opennms Group. A security vulnerability exists in OpenNMS Meridian, Horizon, which is caused by a cross-site scripting XSS vulnerability in the webapp jsp page, which c...

CVE-2023-0815: Insertion of Sensitive Information into Log File

Potential Insertion of Sensitive Information into Jetty Log Files in multiple versions of OpenNMS Meridian and Horizon could allow disclosure of usernames and passwords if the logging level is set to debug. Users should upgrade to Meridian 2023.1.0 or newer, or Horizon 31.0.4. Meridian and Horizo...

GHSA-79JR-8FHM-8WV3 OpenNMS Horizon and Meridian vulnerable to Cross-site Scripting

Unauthenticated, stored cross-site scripting in the display of alarm reduction keys in multiple versions of OpenNMS Horizon and Meridian could allow an attacker access to confidential session information...

CVE-2023-0846 Unauthenticated, stored XSS in display of alarm reduction-key

Unauthenticated, stored cross-site scripting in the display of alarm reduction keys in multiple versions of OpenNMS Horizon and Meridian could allow an attacker access to confidential session information. Users should upgrade to Meridian 2023.1.0 or newer, or Horizon 31.0.4. Meridian and Horizon...

CVE-2023-0846

Unauthenticated, stored cross-site scripting in the display of alarm reduction keys in multiple versions of OpenNMS Horizon and Meridian could allow an attacker access to confidential session information. Users should upgrade to Meridian 2023.1.0 or newer, or Horizon 31.0.4. Meridian and Horizon...

CVE-2023-0846 Unauthenticated, stored XSS in display of alarm reduction-key

Unauthenticated, stored cross-site scripting in the display of alarm reduction keys in multiple versions of OpenNMS Horizon and Meridian could allow an attacker access to confidential session information. Users should upgrade to Meridian 2023.1.0 or newer, or Horizon 31.0.4. Meridian and Horizon...

Opennms Group OpenNMS 跨站脚本漏洞

Opennms Group OpenNMS is an open source, enterprise-grade network monitoring and network management platform from the US-based Opennms Group. A security vulnerability exists in OpenNMS Horizon and Meridian. An attacker could exploit this vulnerability to conduct a cross-site scripting attack to...

PT-2023-8929 · Opennms · Opennms Horizon +1

Name of the Vulnerable Software and Affected Versions: OpenNMS Meridian versions prior to 2023.1.0 OpenNMS Horizon versions prior to 31.0.4 Description: The issue is related to unauthenticated, stored cross-site scripting in the display of alarm reduction keys, which could allow an attacker to...

CVE-2023-0846: Improper Neutralization of Input During Web Page Generation

Unauthenticated, stored cross-site scripting in the display of alarm reduction keys in multiple versions of OpenNMS Horizon and Meridian could allow an attacker access to confidential session information. Users should upgrade to Meridian 2023.1.0 or newer, or Horizon 31.0.4. Meridian and Horizon...

meridian-systems.co.uk Cross Site Scripting vulnerability OBB-2981005

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability of the Meridian Cooperative Utility software, related to deficiencies in access control, allows for obtaining complete information about the user.

The vulnerability of the Meridian Cooperative Utility software is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to obtain complete information about the user...

CVE-2022-29578

Meridian Cooperative Utility Software versions 22.02 and 22.03 allows remote attackers to obtain sensitive information such as name, address, and daily energy usage...

CVE-2022-29578

Meridian Cooperative Utility Software versions 22.02 and 22.03 allows remote attackers to obtain sensitive information such as name, address, and daily energy usage...

Information disclosure

Meridian Cooperative Utility Software versions 22.02 and 22.03 allows remote attackers to obtain sensitive information such as name, address, and daily energy usage...

CVE-2022-29578

Summary of CVE-2022-29578 : Meridian Cooperative Utility Software (versions 22.02 and 22.03) has an improper access control flaw that could allow a remote attacker to disclose private user information such as name, address, and daily energy usage. The issue is rooted in access control (CWE-284) a...

PT-2022-3403

Name of the Vulnerable Software and Affected Versions Meridian Cooperative Utility Software versions 22.02 and 22.03 Description The issue is related to inadequate access control in the Meridian Cooperative Utility Software, allowing remote attackers to obtain sensitive user information, includin...

CVE-2022-29578: Improper Authentication

Meridian Cooperative Utility Software versions 22.02 and 22.03 allows remote attackers to obtain sensitive information such as name, address, and daily energy usage...

Meridian Cooperative Meridian 授权问题漏洞

Meridian Cooperative Meridian is a utility tool from Meridian Cooperative USA. It is used for daily office operations. Meridian Cooperative Meridian is vulnerable to an authorization issue. A remote attacker could exploit this vulnerability to obtain sensitive information such as name, address, a...