CVEvulnerability

CVE-2014-3960

4.3 MEDIUM Published 2014-06-04 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-06-04
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in OpenNMS before 1.12.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

• opennms opennms (<= 1.12.6) • opennms opennms 1.9.0 • opennms opennms 1.9.1 • opennms opennms 1.9.2 • opennms opennms 1.9.3 • opennms opennms 1.9.4 • opennms opennms 1.9.5 • opennms opennms 1.9.6 • opennms opennms 1.9.7 • opennms opennms 1.9.8 • opennms opennms 1.9.90 • opennms opennms 1.9.91 • opennms opennms 1.9.92 • opennms opennms 1.9.93 • opennms opennms 1.10.0 • opennms opennms 1.10.1 • opennms opennms 1.10.2 • opennms opennms 1.10.3 • opennms opennms 1.10.4 • opennms opennms 1.10.5 • opennms opennms 1.10.6 • opennms opennms 1.10.7 • opennms opennms 1.10.8 • opennms opennms 1.10.9 • opennms opennms 1.10.10 • opennms opennms 1.10.11 • opennms opennms 1.10.12 • opennms opennms 1.10.13 • opennms opennms 1.10.14 • opennms opennms 1.11.0 • opennms opennms 1.11.1 • opennms opennms 1.11.2 • opennms opennms 1.11.3 • opennms opennms 1.11.90 • opennms opennms 1.11.91 • opennms opennms 1.11.92 • opennms opennms 1.11.93 • opennms opennms 1.11.94 • opennms opennms 1.12.0 • opennms opennms 1.12.1 • opennms opennms 1.12.2 • opennms opennms 1.12.3 • opennms opennms 1.12.4 • opennms opennms 1.12.5

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References