CVEvulnerability

CVE-2008-4320

4.3 MEDIUM Published 2008-09-29 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-09-29
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in OpenNMS before 1.5.94 allow remote attackers to inject arbitrary web script or HTML via (1) the j_username parameter to j_acegi_security_check, (2) the username parameter to notification/list.jsp, and (3) the filter parameter to event/list.

Affected configurations

• opennms.org opennms (<= 1.0.0) • opennms.org opennms (<= 1.1.0) • opennms.org opennms (<= 1.2.0) • opennms.org opennms (<= 1.3.0) • opennms.org opennms (<= 1.5.90) • opennms.org opennms 1.1.1 • opennms.org opennms 1.1.2 • opennms.org opennms 1.1.3 • opennms.org opennms 1.1.4 • opennms.org opennms 1.1.5 • opennms.org opennms 1.2.1 • opennms.org opennms 1.2.2 • opennms.org opennms 1.2.3 • opennms.org opennms 1.2.4 • opennms.org opennms 1.3.1 • opennms.org opennms 1.3.2 • opennms.org opennms 1.3.3 • opennms.org opennms 1.3.4 • opennms.org opennms 1.3.5 • opennms.org opennms 1.3.6 • opennms.org opennms 1.3.7 • opennms.org opennms 1.3.8 • opennms.org opennms 1.3.9 • opennms.org opennms 1.3.10 • opennms.org opennms 1.3.11 • opennms.org opennms 1.5.91 • opennms.org opennms 1.5.92 • opennms.org opennms 1.5.93

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References