CVE-2019-1010234

9.8 criticalEPSS 1.7%

Critical (9.8) in linuxfoundation open network operating system. EPSS 1.7% chance of exploitation in the next 30 days.

The Linux Foundation ONOS 1.15.0 and ealier is affected by: Improper Input Validation. The impact is: The attacker can remotely execute any commands by sending malicious http request to the controller. The component is: Method runJavaCompiler in YangLiveCompilerManager.java. The attack vector is: network connectivity.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2019-07-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

linuxfoundation:open_network_operating_system

References

https://drive.google.com/file/d/1OkMtrMgjjINsDUQwxpGxjbATB6hiwqyv/view?usp=sharing
https://drive.google.com/file/d/1OkMtrMgjjINsDUQwxpGxjbATB6hiwqyv/view?usp=sharing

Check your stack JSON