6 matches found
CVE-2017-1000078
Linux foundation ONOS 1.9 is vulnerable to XSS in the device. registration
CVE-2017-13763
ONOS versions 1.8.0, 1.9.0, and 1.10.0 do not restrict the amount of memory allocated. The Netty payload size is not limited.
CVE-2017-1000080
Linux foundation ONOS 1.9.0 allows unauthenticated use of websockets.
CVE-2017-1000079
Linux foundation ONOS 1.9.0 is vulnerable to a DoS.
CVE-2017-13762
ONOS versions 1.8.0, 1.9.0, and 1.10.0 are vulnerable to XSS.
CVE-2017-1000081
Linux foundation ONOS 1.9.0 is vulnerable to unauthenticated upload of applications (.oar) resulting in remote code execution.