Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
OpenNMS Meridian 2016, 2017, 2018 before 2018.1.25, 2019 before 2019.1.16, and 2020 before 2020.1.5, Horizon 1.2 through 27.0.4, and Newts <1.5.3 has Incorrect Access Control, which allows local and remote code execution using JEXL expressions.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Tarus Balog OpenNMS Meridian 安全漏洞
Vulnerability Description
Tarus Balog OpenNMS Meridian是美国Canary（Tarus Balog ）公司的一个应用软件。提供了构建网络监控解决方案。 OpenNMS Meridian 中存在安全漏洞，该漏洞源于网络系统或产品未正确限制来自未授权角色的资源访问。允许使用JEXL表达式执行本地和远程代码。
CVSS Information
N/A
Vulnerability Type
N/A