org.opennms:opennms-webapp (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package org.opennms:opennms-webapp, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (5)

• CVE-2023-0870 — CVSS 8.1 (high): A form can be manipulated with cross-site request forgery in multiple versions of OpenNMS Meridian and Horizon. This can potentially allow…
• CVE-2023-0868 — CVSS 6.7 (medium): Reflected cross-site scripting in graph results in multiple versions of OpenNMS Meridian and Horizon could allow an attacker access to…
• CVE-2023-40311 — CVSS 6.7 (medium): Multiple stored XSS were found on different JSP files with unsanitized parameters in OpenMNS Horizon 31.0.8 and versions earlier than…
• CVE-2023-40312 — CVSS 6.7 (medium): Multiple reflected XSS were found on different JSP files with unsanitized parameters in OpenMNS Horizon 31.0.8 and versions earlier than…
• CVE-2023-40314 — CVSS 5.8 (medium): Cross-site scripting in bootstrap.jsp in multiple versions of OpenNMS Meridian and Horizon allows an attacker access to confidential…