CVE-2012-0936

Cross-site scripting (XSS) vulnerability in web/springframework/security/SecurityAuthenticationEventOnmsEventBuilder.java in OpenNMS 1.8.x before 1.8.17, 1.9.93 and earlier, and 1.10.x before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via the Username field, related to login.

• opennms.org opennms 1.8.0 • opennms.org opennms 1.8.1 • opennms.org opennms 1.8.2 • opennms.org opennms 1.8.3 • opennms.org opennms 1.8.4 • opennms.org opennms 1.8.5 • opennms.org opennms 1.8.6 • opennms.org opennms 1.8.7 • opennms.org opennms 1.8.8 • opennms.org opennms 1.8.9 • opennms.org opennms 1.8.10 • opennms.org opennms 1.8.11 • opennms.org opennms 1.8.12 • opennms.org opennms 1.8.13 • opennms.org opennms 1.8.14 • opennms.org opennms 1.8.15 • opennms.org opennms 1.8.16 • opennms.org opennms (<= 1.9.93) • opennms.org opennms 0.2 • opennms.org opennms 0.3.0 • opennms.org opennms 0.4.0 • opennms.org opennms 0.6.0 • opennms.org opennms 0.6.1 • opennms.org opennms 0.6.1--2 • opennms.org opennms 0.6.2 • opennms.org opennms 0.7.1 • opennms.org opennms 0.7.2 • opennms.org opennms 0.7.3 • opennms.org opennms 0.7.5 • opennms.org opennms 0.8.0 • opennms.org opennms 0.8.1 • opennms.org opennms 0.9.0 • opennms.org opennms 0.9.1 • opennms.org opennms 0.9.2 • opennms.org opennms 0.9.3 • opennms.org opennms 0.9.4 • opennms.org opennms 0.9.5 • opennms.org opennms 0.9.6 • opennms.org opennms 0.9.9 • opennms.org opennms 1.0.0 • opennms.org opennms 1.0.1 • opennms.org opennms 1.0.2 • opennms.org opennms 1.1.0 • opennms.org opennms 1.1.1 • opennms.org opennms 1.1.2 • opennms.org opennms 1.1.3 • opennms.org opennms 1.1.4 • opennms.org opennms 1.1.5 • opennms.org opennms 1.2.0 • opennms.org opennms 1.2.1 • opennms.org opennms 1.2.2 • opennms.org opennms 1.2.3 • opennms.org opennms 1.2.4 • opennms.org opennms 1.2.5 • opennms.org opennms 1.2.6 • opennms.org opennms 1.2.7 • opennms.org opennms 1.2.8 • opennms.org opennms 1.2.9 • opennms.org opennms 1.3.0 • opennms.org opennms 1.3.1 … and 59 more