CVE-2020-11886

8.1 highEPSS 1.4%

High (8.1) in opennms. EPSS 1.4% chance of exploitation in the next 30 days.

OpenNMS Horizon and Meridian allows HQL Injection in element/nodeList.htm (aka the NodeListController) via snmpParm or snmpParmValue to addCriteriaForSnmpParm. This affects Horizon before 25.2.1, Meridian 2019 before 2019.1.4, Meridian 2018 before 2018.1.16, and Meridian 2017 before 2017.1.21.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2020-04-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

opennms:horizon
opennms:meridian

References

https://issues.opennms.org/browse/NMS-12572
https://issues.opennms.org/browse/NMS-12572

Check your stack JSON