CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to Stored Cross-Site Scripting, since t...

4.8CVSS6.4AI score0.0049EPSS

Exploits1

RedhatCVE•added 2025/05/22 9:37 p.m.•6 views

CVE-2021-25931

8.8CVSS6.8AI score0.00219EPSS

Exploits1

RedhatCVE•added 2025/05/22 9:36 p.m.•8 views

CVE-2021-25929

4.8CVSS5.8AI score0.00488EPSS

Exploits1

RedhatCVE•added 2025/05/22 7:27 p.m.•8 views

CVE-2021-25934

In OpenNMS Horizon, versions opennms-18.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.7-1 are vulnerable to Stored Cross-Site Scripting, since the...

5.4CVSS6.2AI score0.00284EPSS

Exploits1References1

RedhatCVE•added 2025/05/22 5:49 p.m.•14 views

CVE-2020-12760

An issue was discovered in OpenNMS Horizon before 26.0.1, and Meridian before 2018.1.19 and 2019 before 2019.1.7. The ActiveMQ channel configuration allowed for arbitrary deserialization of Java objects aka ActiveMQ Minion payload deserialization, leading to remote code execution for any...

8.8CVSS7.9AI score0.01503EPSS

Exploits0

NVD•added 2021/09/24 9:15 p.m.•15 views

CVE-2016-6556

OpenNMS version 18.0.1 and prior are vulnerable to a stored XSS issue due to insufficient filtering of SNMP agent supplied data. By creating a malicious SNMP 'sysName' or 'sysContact' response, an attacker can store an XSS payload which will trigger when a user of the web UI views the data. This...

7.1CVSS0.00311EPSS

Exploits2References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by