Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Horizon — Vulnerabilities & Security Advisories 12

All 12 CVE vulnerabilities found in Horizon, with AI-generated Chinese analysis, references, and POCs.

Vendor: The OpenNMS Group

CVE IDTitleCVSSSeverityPublished
CVE-2026-22420 WordPress Horizon theme <= 1.1 - Local File Inclusion vulnerability CWE-98 8.1 -2026-03-05
CVE-2025-53122 SQLi in OpenNMS Horizon and Meridian CWE-89 8.8AIHighAI2025-06-26
CVE-2025-53121 Stored XSS in multiple 33.0.8files in opennms/opennms CWE-79 5.4AIMediumAI2025-06-26
CVE-2023-40314 Cross-site scripting in bootstrap.jsp CWE-20 5.8 Medium2023-11-16
CVE-2023-40612 Authenticated XXE Injection Via The File Editor CWE-91 5.3 Medium2023-08-23
CVE-2023-40315 ROLE_FILESYSTEM_EDITOR Can Be Used To Escalate To ROLE_ADMIN 5.3 Medium2023-08-17
CVE-2023-40313 Disable BeanShell Interpreter Remote Server Mode 7.1 High2023-08-17
CVE-2023-40312 Reflected XSS in multiple JSP files in opennms/opennms CWE-79 6.7 Medium2023-08-14
CVE-2023-40311 Stored XSS in multiple JSP files in opennms/opennms CWE-79 6.7 Medium2023-08-14
CVE-2023-0872 ROLE_REST can be used to escalate to ROLE_ADMIN via /rest/users CWE-269 8.2 High2023-08-14
CVE-2023-0871 An XML External Entity injection vulnerability CWE-611 5.4 Medium2023-08-11
CVE-2023-0846 Unauthenticated, stored XSS in display of alarm reduction-key CWE-79 6.7 Medium2023-02-22

All 12 known CVE vulnerabilities affecting Horizon with full Chinese analysis, references, and POCs where available.