Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in OpenNMS before 1.12.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-3960

Multiple cross-site scripting XSS vulnerabilities in OpenNMS before 1.12.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-3960

OpenNMS before 1.12.7 is affected by multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. The issue is documented across multiple sources (NVD, Red Hat advisory) with a confirmed fix in OpenNMS 1.12.7. Impa...

CVE-2014-3960: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in OpenNMS before 1.12.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2014-5636

Name of the Vulnerable Software and Affected Versions OpenNMS versions prior to 1.12.7 Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which can lead to cross-site scripting XSS attacks. Recommendations For versions prior to 1.12.7,...

CVE-2012-0936

Cross-site scripting XSS vulnerability in web/springframework/security/SecurityAuthenticationEventOnmsEventBuilder.java in OpenNMS 1.8.x before 1.8.17, 1.9.93 and earlier, and 1.10.x before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via the Username field, related to...

Cross site scripting

Cross-site scripting XSS vulnerability in web/springframework/security/SecurityAuthenticationEventOnmsEventBuilder.java in OpenNMS 1.8.x before 1.8.17, 1.9.93 and earlier, and 1.10.x before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via the Username field, related to...

CVE-2012-0936

Cross-site scripting XSS vulnerability in web/springframework/security/SecurityAuthenticationEventOnmsEventBuilder.java in OpenNMS 1.8.x before 1.8.17, 1.9.93 and earlier, and 1.10.x before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via the Username field, related to...

CVE-2012-0936

This CVE affects OpenNMS: vulnerable in OpenNMS 1.8.x before 1.8.17, 1.9.93 and earlier, and 1.10.x before 1.10.1. The flaw is in web/springframework/security/SecurityAuthenticationEventOnmsEventBuilder.java, enabling cross-site scripting via the Username field during login. Root cause: XSS in th...

CVE-2012-0936

Cross-site scripting XSS vulnerability in web/springframework/security/SecurityAuthenticationEventOnmsEventBuilder.java in OpenNMS 1.8.x before 1.8.17, 1.9.93 and earlier, and 1.10.x before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via the Username field, related to...

PT-2012-2963

Name of the Vulnerable Software and Affected Versions OpenNMS versions 1.8.x through 1.8.16 OpenNMS versions 1.9.x through 1.9.93 OpenNMS versions 1.10.x through 1.10.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the Username...

CVE-2012-0936: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in web/springframework/security/SecurityAuthenticationEventOnmsEventBuilder.java in OpenNMS 1.8.x before 1.8.17, 1.9.93 and earlier, and 1.10.x before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via the Username field, related to...

Cross site scripting

Cross-site scripting XSS vulnerability in surveillanceView.htm in OpenNMS 1.5.94 allows remote attackers to inject arbitrary web script or HTML via the viewName parameter...

CVE-2008-6095

Cross-site scripting XSS vulnerability in surveillanceView.htm in OpenNMS 1.5.94 allows remote attackers to inject arbitrary web script or HTML via the viewName parameter...

CVE-2008-6095

CVE-2008-6095 is a cross-site scripting (XSS) vulnerability in OpenNMS version 1.5.94, exploitable via the viewName parameter in surveillanceView.htm. ATT&CK/impact details are limited to the ability of remote attackers to inject arbitrary web script or HTML, with the NVD entry listing a Medium b...

CVE-2008-6095

Cross-site scripting XSS vulnerability in surveillanceView.htm in OpenNMS 1.5.94 allows remote attackers to inject arbitrary web script or HTML via the viewName parameter...

CVE-2008-6095: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in surveillanceView.htm in OpenNMS 1.5.94 allows remote attackers to inject arbitrary web script or HTML via the viewName parameter...

OpenNMS Multiple Vulnerabilities

OpenNMS Multiple Vulnerabilities BugSec | Security Advisory Moshe Ben-Abu | Security Expert Advisory URL PDF: http://www.bugsec.com/upfiles/OpenNMSMultipleVulnerabilities.pdf - Table of Contents - OPENNMS MULTIPLE VULNERABILITIES 1 Vendor 3 Application Description 3 OpenNMS HTTP Response Splittin...

opennms-xss.txt

OpenNMS Multiple Vulnerabilities BugSec | Security Advisory Moshe Ben-Abu | Security Expert Advisory URL PDF: http://www.bugsec.com/upfiles/OpenNMSMultipleVulnerabilities.pdf - Table of Contents - OPENNMS MULTIPLE VULNERABILITIES 1 Vendor 3 Application Description 3 OpenNMS HTTP Response Splittin...

OpenNMS Web Console Detection

The remote web server is running an OpenNMS Web Console. OpenNMS is an open source, enterprise-grade network management platform, and the Web Console provides a web-based management interface to it. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...