OpenNMS Horizon and Meridian allows HQL Injection in element/nodeList.htm (aka the NodeListController) via snmpParm or snmpParmValue to addCriteriaForSnmpParm. This affects Horizon prior to 25.2.1, Meridian 2019 prior to 2019.1.4, Meridian 2018 prior to 2018.1.16, and Meridian 2017 prior to 2017.1.21.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
opennms horizon |
||
opennms meridian |