PT-2021-8426
CVE-2016-6555
·
تاريخ النشر
2021-09-24
·
تاريخ التحديث
2022-06-15
الوصف من
CVSS 3.1
7.1
عاليةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
Name of the Vulnerable Software and Affected Versions
OpenNMS versions 18.0.1 and prior
Description
The issue is related to a stored XSS problem due to insufficient filtering of SNMP trap supplied data. An attacker can create a malicious SNMP trap to store an XSS payload, which will trigger when a user views the events list page in the web UI.
Recommendations
For OpenNMS versions 18.0.1 and prior, update to version 18.0.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the events list page in the web UI until the update is applied.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾