CVE-2008-4320

Published: Sep 29, 2008Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in OpenNMS before 1.5.94 allow remote attackers to inject arbitrary web script or HTML via (1) the j_username parameter to j_acegi_security_check, (2) the username parameter to notification/list.jsp, and (3) the filter parameter to event/list.

Affected (28)

Products: Opennms.org: Opennms

Opennms.org

1 product

Opennms

Configuration A

28 vulnerable

Vulnerable Software	Affected Versions
Opennms.org Opennms	Up to 1.0.0
Opennms.org Opennms	Up to 1.1.0
Opennms.org Opennms	Up to 1.2.0
Opennms.org Opennms	Up to 1.3.0
Opennms.org Opennms	Up to 1.5.90
Opennms.org Opennms	Version 1.1.1
Opennms.org Opennms	Version 1.1.2
Opennms.org Opennms	Version 1.1.3
Opennms.org Opennms	Version 1.1.4
Opennms.org Opennms	Version 1.1.5
Opennms.org Opennms	Version 1.2.1
Opennms.org Opennms	Version 1.2.2
Opennms.org Opennms	Version 1.2.3
Opennms.org Opennms	Version 1.2.4
Opennms.org Opennms	Version 1.3.10
Opennms.org Opennms	Version 1.3.11
Opennms.org Opennms	Version 1.3.1
Opennms.org Opennms	Version 1.3.2
Opennms.org Opennms	Version 1.3.3
Opennms.org Opennms	Version 1.3.4
Opennms.org Opennms	Version 1.3.5
Opennms.org Opennms	Version 1.3.6
Opennms.org Opennms	Version 1.3.7
Opennms.org Opennms	Version 1.3.8
Opennms.org Opennms	Version 1.3.9
Opennms.org Opennms	Version 1.5.91
Opennms.org Opennms	Version 1.5.92
Opennms.org Opennms	Version 1.5.93