high8.1
CVE-2020-11886
OpenNMS Horizon and Meridian allows HQL Injection in element/nodeList.htm (aka the NodeListController) via snmpParm or snmpParmValue to addCriteriaForSnmpParm.
Impact
OpenNMS Horizon and Meridian allows HQL Injection in element/nodeList.htm (aka the NodeListController) via snmpParm or snmpParmValue to addCriteriaForSnmpParm. This affects Horizon before 25.2.1, Meridian 2019 before 2019.1.4, Meridian 2018 before 2018.1.16, and Meridian 2017 before 2017.1.21.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opennms | Horizon | before 25.2.1 |
| Opennms | Meridian | from 2017 before 2017.1.21 from 2018 before 2018.1.16 from 2019 before 2019.1.4 |