VYPR
← All advisories
High severity8.1NVD Advisory· Published Apr 17, 2020· Updated Jun 17, 2026

CVE-2020-11886

CVE-2020-11886

Description

OpenNMS Horizon and Meridian allows HQL Injection in element/nodeList.htm (aka the NodeListController) via snmpParm or snmpParmValue to addCriteriaForSnmpParm. This affects Horizon before 25.2.1, Meridian 2019 before 2019.1.4, Meridian 2018 before 2018.1.16, and Meridian 2017 before 2017.1.21.

Affected products

5
  • Opennms/Horizon2 versions
    cpe:2.3:a:opennms:horizon:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:opennms:horizon:*:*:*:*:*:*:*:*range: <25.2.1
    • (no CPE)range: <25.2.1
  • Opennms/Meridian2 versions
    cpe:2.3:a:opennms:meridian:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:opennms:meridian:*:*:*:*:*:*:*:*range: >=2017,<2017.1.21
    • (no CPE)range: 2019 before 2019.1.4, Meridian 2018 before 2018.1.16, and Meridian 2017 before 2017.1.21
  • OpenNMS/Horizon and Meridiandescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.