CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

NVD•added 2020/04/17 8:15 p.m.•13 views

CVE-2020-11886

OpenNMS Horizon and Meridian allows HQL Injection in element/nodeList.htm aka the NodeListController via snmpParm or snmpParmValue to addCriteriaForSnmpParm. This affects Horizon before 25.2.1, Meridian 2019 before 2019.1.4, Meridian 2018 before 2018.1.16, and Meridian 2017 before 2017.1.21...

8.1CVSS8.2AI score0.00243EPSS

Exploits0References1

OSV•added 2020/04/17 8:15 p.m.•11 views

CVE-2020-11886

8.1CVSS7.2AI score

Exploits0References1

Prion•added 2020/04/17 8:15 p.m.•13 views

Sql injection

5.5CVSS8.2AI score0.00243EPSS

Exploits0References1Affected Software2

CVE•added 2020/04/17 7:37 p.m.•147 views

CVE-2020-11886

OpenNMS Horizon and Meridian are affected by CVE-2020-11886 due to a HQL Injection vulnerability in the NodeListController (element/nodeList.htm) reachable via snmpParms. The issue allows adding criteria through snmpParm or snmpParmValue, enabling injection in the HQL query. Affected versions are...

8.1CVSS8.1AI score0.00243EPSS

Exploits0References1Affected Software2