How many CVEs does OpenNMS Horizon have?

OpenNMS Horizon has 31 published CVE records since 2020.

How many OpenNMS Horizon CVEs are in CISA KEV?

None of OpenNMS Horizon's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for OpenNMS Horizon vulnerabilities?

Yes — 8 of OpenNMS Horizon's CVEs have a known public exploit.

Which versions of OpenNMS Horizon are affected?

40 distinct OpenNMS Horizon versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in OpenNMS Horizon CVEs?

OpenNMS Horizon's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-862 (Missing Authorization).

How many critical OpenNMS Horizon vulnerabilities are there?

OpenNMS Horizon has 1 critical and 10 high-severity CVEs.

What is the average severity of OpenNMS Horizon CVEs?

The average CVSS base score across OpenNMS Horizon's scored CVEs is 6.8.

OpenNMS Horizon Vulnerabilities: CVEs, CISA KEV & Security Advisories

OpenNMS denial of service via XML entity expansion

CVE-2026-111252

Patch

CWE-776

Medium · CVSS 6.5

EPSS 0.2% (15th pct)2026-10-15

OpenNMS REST authorization bypass via non-canonical HTTP method

CVE-2026-111235

Patch

CWE-862

Critical · CVSS 9.1

EPSS 0.4% (30th pct)2026-10-15

OpenNMS SQL injection in shipped Asset Management JasperReports via the DATE_FORMAT parameter (ROLE_USER)

CVE-2026-89089

Patch

CWE-89

Medium · CVSS 6.5

EPSS 0.4% (29th pct)2026-09-10

OpenNMS XML collector XXE allows arbitrary file read from the OpenNMS host

CVE-2026-19596

Patch

CWE-611

Medium · CVSS 5.9

EPSS 0.2% (11th pct)2026-09-10

OpenNMS missing authorization on /api/v2 PATCH endpoints allows unauthenticated configuration changes

CVE-2026-89054

Patch

CWE-862

High · CVSS 8.2

EPSS 0.5% (42th pct)2026-09-10

OpenNMS v2 Alarm REST API inverted authorization check lets ROLE_REST users acknowledge alarms as any user and bypass read-only

CVE-2026-19182

Patch

CWE-863

Medium · CVSS 4.3

EPSS 0.3% (16th pct)2026-08-13

OpenNMS JEXL sandbox bypass in Measurements REST API allows ROLE_USER to load arbitrary classes

CVE-2026-19135

Patch

CWE-470

Medium · CVSS 5.4

EPSS 0.3% (20th pct)2026-08-13

SQLi in OpenNMS Horizon and Meridian

CVE-2025-53122

Patch

CWE-89

Medium · CVSS 6.9

EPSS 0.2% (14th pct)2025-06-26

Stored XSS in multiple 33.0.8files in opennms/opennms

CVE-2025-53121

Patch

CWE-79

Medium · CVSS 6.9

EPSS 0.2% (14th pct)2025-06-26

OpenNMS Cross-site Scripting vulnerability

CVE-2023-40314

Patch

CWE-20

Medium · CVSS 6.1

EPSS 0.4% (36th pct)2023-11-16

Authenticated XXE Injection Via The File Editor

CVE-2023-40612

Patch

CWE-91

High · CVSS 8.0

EPSS 0.4% (35th pct)2023-08-23

ROLE_FILESYSTEM_EDITOR Can Be Used To Escalate To ROLE_ADMIN

CVE-2023-40315

Public exploit

Patch

CWE-863

High · CVSS 8.0

EPSS 2.9% (86th pct)2023-08-17

Disable BeanShell Interpreter Remote Server Mode

CVE-2023-40313

Patch

CWE-94

High · CVSS 8.8

EPSS 0.8% (55th pct)2023-08-17

OpenNMS vulnerable to Cross-site Scripting

CVE-2023-40312

Patch

CWE-79

Medium · CVSS 6.7

EPSS 0.6% (50th pct)2023-08-14

OpenNMS vulnerable to Cross-site Scripting

CVE-2023-40311

Patch

CWE-79

Medium · CVSS 6.7

EPSS 0.7% (54th pct)2023-08-14

ROLE_REST can be used to escalate to ROLE_ADMIN via /rest/users

CVE-2023-0872

Public exploit

Patch

CWE-269

High · CVSS 8.2

EPSS 3.3% (88th pct)2023-08-14

OpenNMS Horizon XXE Injection Vulnerability

CVE-2023-0871

Patch

CWE-611

High · CVSS 8.8

EPSS 0.5% (45th pct)2023-08-11

Form Can Be Manipulated with Cross-Site Request Forgery (CSRF)

CVE-2023-0870

Patch

Workaround

CWE-352

High · CVSS 8.1

EPSS 0.3% (22th pct)2023-03-22

OpenNMS has potential Insertion of Sensitive Information into Log File vulnerability

CVE-2023-0815

Patch

CWE-532

Medium · CVSS 6.8

EPSS 0.6% (49th pct)2023-02-23

OpenNMS Meridian and Horizon vulnerable to Cross-site Scripting

CVE-2023-0867

Patch

CWE-79

Medium · CVSS 6.7

EPSS 0.4% (35th pct)2023-02-23

OpenNMS Meridian and Horizon vulnerable to Cross-site Scripting

CVE-2023-0868

Patch

CWE-20

Medium · CVSS 6.7

EPSS 0.4% (37th pct)2023-02-23

Cross Site Scripting in OpenNMS

CVE-2023-0869

Patch

CWE-79

Medium · CVSS 6.1

EPSS 0.4% (34th pct)2023-02-23

OpenNMS Horizon and Meridian vulnerable to Cross-site Scripting

CVE-2023-0846

Patch

CWE-79

Medium · CVSS 6.7

EPSS 0.5% (41th pct)2023-02-22

OpenNMS Horizon vulnerable to XSS

CVE-2021-25934

Public exploit

Patch

CWE-79

Medium · CVSS 5.4

EPSS 1.0% (62th pct)2021-05-25

Medium vulnerability · 2021-05-25

CVE-2021-25935

Public exploit

Patch

CWE-79

Medium · CVSS 5.4

EPSS 0.9% (59th pct)2021-05-25

Cross-site Scripting in OpenNMS Horizon

CVE-2021-25933

Public exploit

Patch

CWE-79

Medium · CVSS 4.8

EPSS 1.0% (63th pct)2021-05-20

Cross-Site Request Forgery in OpenNMS Horizon

CVE-2021-25931

Public exploit

Patch

CWE-352

High · CVSS 8.8

EPSS 0.7% (53th pct)2021-05-20

Cross-site Scripting in OpenNMS Horizon

CVE-2021-25929

Public exploit

Patch

CWE-79

Medium · CVSS 4.8

EPSS 1.0% (63th pct)2021-05-20

Cross-Site Request Forgery in OpenNMS Horizon

CVE-2021-25930

Public exploit

Patch

CWE-352

Medium · CVSS 4.3

EPSS 0.6% (49th pct)2021-05-20

OpenNMS Horizon RCE via JEXL2 expression

CVE-2021-3396

Patch

High · CVSS 8.8

EPSS 2.4% (84th pct)2021-02-17

OpenNMS Horizon Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Version ranges

Fixed in

Default status

Common weakness types

Disclosure activity by year

Other OpenNMS products

Frequently asked questions

References

Track OpenNMS Horizon vulnerabilities