Vulnerabilities (CVE)

Filtered by vendor Opennms Subscribe
Filtered by product Horizon
Total 21 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-11886 1 Opennms 2 Horizon, Meridian 2020-05-05 5.5 MEDIUM 8.1 HIGH
OpenNMS Horizon and Meridian allows HQL Injection in element/nodeList.htm (aka the NodeListController) via snmpParm or snmpParmValue to addCriteriaForSnmpParm. This affects Horizon before 25.2.1, Meridian 2019 before 2019.1.4, Meridian 2018 before 2018.1.16, and Meridian 2017 before 2017.1.21.