CVE-2019-12124

9.1 criticalEPSS 1.2%

Critical (9.1) in onap open network automation platform. EPSS 1.2% chance of exploitation in the next 30 days.

An issue was discovered in ONAP APPC before Dublin. By using an exposed unprotected Jolokia interface, an unauthenticated attacker can read or overwrite an arbitrary file. All APPC setups are affected.

Severity

CVSS 3.1

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
Published: 2020-03-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

onap:open_network_automation_platform

References

https://jira.onap.org/browse/OJSI-63
https://jira.onap.org/browse/OJSI-63

Check your stack JSON