📦 Horizon

by Opennms

🔍 What is Horizon?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2023-40313

HIGH CVSS 7.1 Aug 17, 2023

This vulnerability allows remote attackers to execute arbitrary Java code on OpenNMS Horizon and Meridian servers running vulnerable versions. It affects organizations using these network monitoring s...

CVE-2023-0870

HIGH CVSS 8.1 Mar 22, 2023

This CVE describes a cross-site request forgery (CSRF) vulnerability in OpenNMS Meridian and Horizon monitoring platforms. Attackers can manipulate forms to perform unauthorized actions, potentially a...

CVE-2021-25931

HIGH CVSS 8.8 May 20, 2021

This CVE describes a Cross-Site Request Forgery (CSRF) vulnerability in OpenNMS Horizon and Meridian that allows attackers to trick administrators into granting ROLE_ADMIN privileges to normal users. ...

CVE-2021-3396

HIGH CVSS 8.8 Feb 17, 2021

CVE-2021-3396 is an incorrect access control vulnerability in OpenNMS monitoring systems that allows attackers to execute arbitrary code using JEXL expressions. This affects OpenNMS Meridian 2016-2020...