Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

The OpenNMS Group Security Vulnerabilities | CyStack CVE Database

CVE	Exploitation status	Fix	Affected product	Published	Severity
`CVE-2026-89089`OpenNMS SQL injection in shipped Asset Management JasperReports via the DATE_FORMAT parameter (ROLE_USER)	Exploitation statusNot confirmed	FixYes	Affected productMeridian	Published09/10/2026	SeverityMedium
`CVE-2026-19596`OpenNMS XML collector XXE allows arbitrary file read from the OpenNMS host	Exploitation statusNot known exploited	FixYes	Affected productMeridian	Published09/10/2026	SeverityMedium
`CVE-2026-89054`OpenNMS missing authorization on /api/v2 PATCH endpoints allows unauthenticated configuration changes	Exploitation statusNot known exploited	FixYes	Affected productHorizon	Published09/10/2026	SeverityHigh
`CVE-2026-19182`OpenNMS v2 Alarm REST API inverted authorization check lets ROLE_REST users acknowledge alarms as any user and bypass read-only	Exploitation statusNot known exploited	FixYes	Affected productMeridian	Published08/13/2026	SeverityMedium
`CVE-2026-19135`OpenNMS JEXL sandbox bypass in Measurements REST API allows ROLE_USER to load arbitrary classes	Exploitation statusNot known exploited	FixYes	Affected productMeridian	Published08/13/2026	SeverityMedium
`CVE-2025-53122`SQLi in OpenNMS Horizon and Meridian	Exploitation statusNot known exploited	FixYes	Affected productHorizon	Published06/26/2025	SeverityMedium
`CVE-2025-53121`Stored XSS in multiple 33.0.8files in opennms/opennms	Exploitation statusNot known exploited	FixYes	Affected productHorizon	Published06/26/2025	SeverityMedium
`CVE-2023-40314`Cross-site scripting in bootstrap.jsp	Exploitation statusNot known exploited	FixYes	Affected productHorizon	Published11/16/2023	SeverityMedium
`CVE-2023-40612`Authenticated XXE Injection Via The File Editor	Exploitation statusNot known exploited	FixYes	Affected productHorizon	Published08/23/2023	SeverityMedium
`CVE-2023-40315`ROLE_FILESYSTEM_EDITOR Can Be Used To Escalate To ROLE_ADMIN	Exploitation statusNot known exploited	FixYes	Affected productHorizon	Published08/17/2023	SeverityMedium
`CVE-2023-40313`Disable BeanShell Interpreter Remote Server Mode	Exploitation statusNot known exploited	FixYes	Affected productHorizon	Published08/17/2023	SeverityHigh
`CVE-2023-40312`Reflected XSS in multiple JSP files in opennms/opennms	Exploitation statusNot known exploited	FixYes	Affected productHorizon	Published08/14/2023	SeverityMedium
`CVE-2023-40311`Stored XSS in multiple JSP files in opennms/opennms	Exploitation statusNot known exploited	FixYes	Affected productHorizon	Published08/14/2023	SeverityMedium
`CVE-2023-0872`ROLE_REST can be used to escalate to ROLE_ADMIN via /rest/users	Exploitation statusNot known exploited	FixYes	Affected productHorizon	Published08/14/2023	SeverityHigh
`CVE-2023-0871`An XML External Entity injection vulnerability	Exploitation statusNot known exploited	FixYes	Affected productHorizon	Published08/11/2023	SeverityMedium
`CVE-2023-0870`Form Can Be Manipulated with Cross-Site Request Forgery (CSRF)	Exploitation statusNot known exploited	FixYes	Affected productMeridian	Published03/22/2023	SeverityHigh
`CVE-2023-0815`Plaintext Password Present in the Web logs	Exploitation statusNot known exploited	FixYes	Affected productMeridian	Published02/23/2023	SeverityMedium
`CVE-2023-0867`Multiple stored and reflected Cross-site Scripting in webapp	Exploitation statusNot confirmed	FixYes	Affected productMeridian	Published02/23/2023	SeverityMedium
`CVE-2023-0868`Stealing Cookies using Reflected XSS via graph results	Exploitation statusNot confirmed	FixYes	Affected productMeridian	Published02/23/2023	SeverityMedium
`CVE-2023-0869`Cross-site scripting in outage/list.htm	Exploitation statusNot confirmed	FixYes	Affected productMeridian	Published02/23/2023	SeverityMedium
`CVE-2023-0846`Unauthenticated, stored XSS in display of alarm reduction-key	Exploitation statusNot confirmed	FixYes	Affected productHorizon	Published02/22/2023	SeverityMedium

21 / 21 Results

All vulnerabilities loaded

Security vulnerabilities from The OpenNMS Group

The OpenNMS Group

How many security vulnerabilities does The OpenNMS Group have?

Which The OpenNMS Group product has the most security vulnerabilities?

Run an in-depth assessment with complete web risk management

Popular The OpenNMS Group products

Horizon

Meridian