OpenNMS Horizon and Meridian vulnerable to Cross-site Scripting
Unauthenticated, stored cross-site scripting in the display of alarm reduction keys in multiple versions of OpenNMS Horizon and Meridian could allow an attacker access to confidential session information.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-0846US | medium6.1 | — | ||
Unauthenticated, stored cross-site scripting in the display of alarm reduction keys in multiple versions of OpenNMS Horizon and Meridian could allow an attacker access to confident… | ||||
02
references
External citations — patches, advisories, analysis.
- https://docs.opennms.com/meridian/2022/releasenotes/changelog.html#releasenotes-changelog-Meridian-2022.1.13WEB
- https://github.com/OpenNMS/opennmsPACKAGE
- https://github.com/OpenNMS/opennms/pull/5506/filesWEB
- https://issues.opennms.org/browse/NMS-14877WEB
- https://nvd.nist.gov/vuln/detail/CVE-2023-0846ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan