MidnightBSD

Advisories for opennms.org

CVE-2012-0936 MEDIUM

Cross-site scripting (XSS) vulnerability in web/springframework/security/SecurityAuthenticationEventOnmsEventBuilder.java in OpenNMS 1.8.x before 1.8.17, 1.9.93 and earlier, and 1.10.x before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via the Username field, related to login.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-79,

Products Affected

Vendor Product Version
opennms.org opennms 1.6.1
opennms.org opennms 1.9.5
opennms.org opennms 1.5.91
opennms.org opennms 1.2.8
opennms.org opennms 1.6.0
opennms.org opennms 0.7.5
opennms.org opennms 1.3.9
opennms.org opennms 1.5.94
opennms.org opennms 1.7.7
opennms.org opennms 1.3.5
opennms.org opennms 1.6.11
opennms.org opennms 1.9.6
opennms.org opennms 1.6.2
opennms.org opennms 1.9.7
opennms.org opennms 0.7.3
opennms.org opennms 1.9.90
opennms.org opennms 1.3.1
opennms.org opennms 1.10.0
opennms.org opennms 1.2.4
opennms.org opennms 1.8.15
opennms.org opennms 1.7.6
opennms.org opennms 1.9.92
opennms.org opennms 1.9.8
opennms.org opennms 1.8.3
opennms.org opennms 1.6.6
opennms.org opennms 1.3.7
opennms.org opennms 1.6.4
opennms.org opennms 1.8.13
opennms.org opennms 0.9.1
opennms.org opennms 1.1.3
opennms.org opennms 0.9.9
opennms.org opennms 1.3.6
opennms.org opennms 1.5.95
opennms.org opennms 1.3.3
opennms.org opennms 0.6.1--2
opennms.org opennms 1.0.1
opennms.org opennms 1.7.92
opennms.org opennms 1.7.0
opennms.org opennms 1.8.5
opennms.org opennms 1.7.8
opennms.org opennms 1.9.2
opennms.org opennms 1.8.1
opennms.org opennms 1.2.0
opennms.org opennms 1.9.0
opennms.org opennms 0.7.1
opennms.org opennms 1.2.5
opennms.org opennms 1.8.16
opennms.org opennms 1.8.6
opennms.org opennms 0.6.2
opennms.org opennms 0.9.3
opennms.org opennms 1.9.91
opennms.org opennms 1.8.4
opennms.org opennms 1.5.93
opennms.org opennms 0.3.0
opennms.org opennms 1.3.4
opennms.org opennms 1.8.7
opennms.org opennms 1.2.6
opennms.org opennms 1.6.10
opennms.org opennms 1.2.7
opennms.org opennms 1.7.1
opennms.org opennms 1.7.90
opennms.org opennms 0.9.2
opennms.org opennms 1.7.4
opennms.org opennms 1.8.8
opennms.org opennms 1.5.97
opennms.org opennms 1.8.9
opennms.org opennms 1.6.8
opennms.org opennms 1.7.9
opennms.org opennms 1.6.7
opennms.org opennms 0.8.1
opennms.org opennms 1.1.1
opennms.org opennms 1.1.2
opennms.org opennms 1.0.0
opennms.org opennms 1.0.2
opennms.org opennms 1.9.1
opennms.org opennms 1.8.10
opennms.org opennms 0.6.1
opennms.org opennms *
opennms.org opennms 1.2.3
opennms.org opennms 1.8.11
opennms.org opennms 1.5.98
opennms.org opennms 1.5.90
opennms.org opennms 1.5.99
opennms.org opennms 0.9.0
opennms.org opennms 1.8.12
opennms.org opennms 1.8.2
opennms.org opennms 1.1.4
opennms.org opennms 1.7.10
opennms.org opennms 0.7.2
opennms.org opennms 1.2.9
opennms.org opennms 1.6.3
opennms.org opennms 1.6.9
opennms.org opennms 1.3.0
opennms.org opennms 1.8.14
opennms.org opennms 1.3.11
opennms.org opennms 1.7.2
opennms.org opennms 1.3.8
opennms.org opennms 1.7.3
opennms.org opennms 1.5.92
opennms.org opennms 1.3.10
opennms.org opennms 0.9.4
opennms.org opennms 1.7.5
opennms.org opennms 1.5.96
opennms.org opennms 0.4.0
opennms.org opennms 0.8.0
opennms.org opennms 1.9.3
opennms.org opennms 1.8.0
opennms.org opennms 1.3.2
opennms.org opennms 1.2.1
opennms.org opennms 1.2.2
opennms.org opennms 0.9.6
opennms.org opennms 1.1.0
opennms.org opennms 1.9.4
opennms.org opennms 0.2
opennms.org opennms 1.6.5
opennms.org opennms 0.6.0
opennms.org opennms 1.1.5
opennms.org opennms 0.9.5
opennms.org opennms 1.7.91