opennms meridian

Name: opennms meridian
Brand: opennms

productUS

cpe:2.3:a:opennms:meridian:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical7high16medium0low

updated 2026-10-28

vulnerabilities (23)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-0872US	high8.0	3.31% (89th)	Exploit	no fix	2023-08-14	4 versions
CVE-2023-40315US	high8.0OT elevated	2.85% (87th)	Exploit	2023.1.5	2023-08-17	2023.0.0 → 2023.1.5
CVE-2021-3396US	high8.8OT elevated	2.37% (84th)	—	2018.1.25	2021-02-17	5 versions
CVE-2020-11886US	high8.1	1.38% (72nd)	—	2017.1.21	2020-04-17	3 versions
CVE-2021-25933US	medium4.8	1.04% (64th)	—	2019.1.19	2021-05-20	2 versions
CVE-2021-25929US	medium4.8	1.02% (63rd)	—	2020.1.7	2021-05-20	2 versions
CVE-2021-25934US	medium5.4	1.01% (63rd)	—	no fix	2021-05-25	2 versions
CVE-2021-25932US	medium5.4	0.93% (60th)	—	no fix	2021-06-01	2 versions
CVE-2021-25935US	medium5.4	0.91% (60th)	—	no fix	2021-05-25	2 versions
CVE-2023-40313US	high8.8	0.78% (56th)	—	2023.1.6	2023-08-17	4 versions
CVE-2023-40311US	medium4.8	0.74% (54th)	—	2020.1.38	2023-08-14	3 versions
CVE-2021-25931US	high8.8	0.73% (54th)	—	2020.1.7	2021-05-20	2 versions
CVE-2023-40312US	medium5.2	0.64% (51st)	—	2023.1.6	2023-08-14	3 versions
CVE-2023-0815US	medium6.5	0.63% (50th)	—	2023.1.0	2023-02-23	< 2023.1.0
CVE-2021-25930US	medium4.3	0.63% (50th)	—	2019.1.19	2021-05-20	2 versions
CVE-2023-0871US	medium6.1	0.55% (46th)	—	2021.1.30	2023-08-11	4 versions
CVE-2023-0846US	medium6.1	0.49% (42nd)	—	2023.1.0	2023-02-22	< 2023.1.0
CVE-2023-0868US	medium6.1	0.44% (38th)	—	2023.1.0	2023-02-23	< 2023.1.0
CVE-2023-40314US	medium6.1	0.43% (38th)	—	2023.1.9	2023-11-16	< 2023.1.9
CVE-2023-0867US	medium6.1	0.42% (37th)	—	2023.1.0	2023-02-23	< 2023.1.0
CVE-2023-40612US	high8.0	0.42% (36th)	—	2023.1.5	2023-08-23	2023.0.0 → 2023.1.5
CVE-2023-0869US	medium6.1	0.41% (35th)	—	2023.1.0	2023-02-23	< 2023.1.0
CVE-2023-0870US	medium6.7	0.30% (23rd)	—	2022.1.14	2023-03-22	4 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')12 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-352Cross-Site Request Forgery (CSRF)3 CVEs
CWE-863Incorrect Authorization2 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-532Insertion of Sensitive Information into Log File1 CVEs
CWE-611Improper Restriction of XML External Entity Reference1 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE23 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan