CVE-2020-11886 | BDVDB-2026-134707 Detail

Description#

OpenNMS Horizon and Meridian allows HQL Injection in element/nodeList.htm (aka the NodeListController) via snmpParm or snmpParmValue to addCriteriaForSnmpParm. This affects Horizon before 25.2.1, Meridian 2019 before 2019.1.4, Meridian 2018 before 2018.1.16, and Meridian 2017 before 2017.1.21.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://issues.opennms.org/browse/NMS-12572

Exploit#

No public exploit known

History#

Version 12020-04-17Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.