| Package | Affected versions | Patched versions |
|---|---|---|
| org.opennms.features:org.opennms.features.measurements | ≥ 16.0.0, < 27.0.4 | 27.0.4 |
| org.opennms:opennms | ≥ 16.0.0, < 27.0.4 | 27.0.4 |
| org.opennms:opennms-provision | ≥ 16.0.0, < 27.0.4 | 27.0.4 |
| org.opennms:opennms-util | ≥ 16.0.0, < 27.0.4 | 27.0.4 |
| horizon | ≥ 16.0.0, ≤ 27.0.3 | |
| meridian | ≥ 2016.1.0, ≤ 2016.1.24≥ 2017.1.0, ≤ 2017.1.26≥ 2018.1.0, < 2018.1.25≥ 2019.1.0, < 2019.1.16≥ 2020.1.0, < 2020.1.5 | 2018.1.252019.1.162020.1.5 |
| newts | < 1.5.3 | 1.5.3 |
OpenNMS Meridian 2016, 2017, 2018 before 2018.1.25, 2019 before 2019.1.16, and 2020 before 2020.1.5, Horizon 1.2 through 27.0.4, and Newts <1.5.3 has Incorrect Access Control, which allows local and remote code execution using JEXL expressions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free