CVE-2017-1000080

Linux foundation ONOS 1.9.0 allows unauthenticated use of websockets...

CVE-2017-1000081

Linux foundation ONOS 1.9.0 is vulnerable to unauthenticated upload of applications .oar resulting in remote code execution...

CVE-2017-1000079

Linux foundation ONOS 1.9.0 is vulnerable to a DoS...

CVE-2017-1000081

Linux foundation ONOS 1.9.0 is vulnerable to unauthenticated upload of applications .oar resulting in remote code execution...

CVE-2017-1000078

Linux foundation ONOS 1.9 is vulnerable to XSS in the device. registration...

CVE-2017-1000080

Linux foundation ONOS 1.9.0 allows unauthenticated use of websockets...

CVE-2017-1000078

Linux foundation ONOS 1.9 is vulnerable to XSS in the device. registration...

Design/Logic Flaw

Linux foundation ONOS 1.9.0 is vulnerable to a DoS...

Remote code execution

Linux foundation ONOS 1.9.0 is vulnerable to unauthenticated upload of applications .oar resulting in remote code execution...

Design/Logic Flaw

Linux foundation ONOS 1.9 is vulnerable to XSS in the device. registration...

Design/Logic Flaw

Linux foundation ONOS 1.9.0 allows unauthenticated use of websockets...

CVE-2017-1000081: Unrestricted Upload of File with Dangerous Type

Linux foundation ONOS 1.9.0 is vulnerable to unauthenticated upload of applications .oar resulting in remote code execution...

CVE-2017-1000078: Improper Neutralization of Input During Web Page Generation

Linux foundation ONOS 1.9 is vulnerable to XSS in the device. registration...

CVE-2017-1000079: Undefined Security Weakness

Linux foundation ONOS 1.9.0 is vulnerable to a DoS...

CVE-2017-1000080: Undefined Security Weakness

Linux foundation ONOS 1.9.0 allows unauthenticated use of websockets...

CVE-2017-1000078

ONOS 1.9 is affected by a cross-site scripting (XSS) vulnerability in the device registration component. The issue is documented across multiple sources (e.g., NVD CVE-2017-1000078) with CVSS metrics indicating a network-accessible flaw requiring user interaction (UI:R) and resulting in partial i...

CVE-2017-1000080

Linux foundation ONOS 1.9.0 allows unauthenticated use of websockets...

CVE-2017-1000079

Linux foundation ONOS 1.9.0 is vulnerable to a DoS...

CVE-2017-1000081

Linux foundation ONOS 1.9.0 is vulnerable to unauthenticated upload of applications .oar resulting in remote code execution...

CVE-2017-1000081

CVE-2017-1000081 affects Linux Foundation ONOS 1.9.0 and is due to unauthenticated upload of applications (.oar), enabling remote code execution. Primary sources (NVD) cite high/critical impacts (CVSSv2: 7.5/Partial partial integrity and availability; CVSSv3.1: 9.8 with high impact and network at...