Onosproject
Onosproject Onos: vulnerabilidades y CVE
Onosproject Onos tiene 13 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 4 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE13
Últimos 12 meses0
Críticas4
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-30093 | Media (6.1) | 0.49% | — | 4 may 2023 | A cross-site scripting (XSS) vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter… |
| CVE-2019-13624 | Crítica (9.8) | 1.9% | — | 17 jul 2019 | In ONOS 1.15.0, apps/yang/web/src/main/java/org/onosproject/yang/web/YangWebResource.java mishandles backquote characters within strings that can be used in a shell command. |
| CVE-2018-1000616 | Crítica (9.8) | 1.4% | — | 9 jul 2018 | ONOS ONOS controller version 1.13.1 and earlier contains a XML External Entity (XXE) vulnerability in onos\drivers\utilities\src\main\java\org\onosproject\drivers\utilities\XmlConfigParser.java loadxml() that can result… |
| CVE-2018-1000615 | Alta (7.5) | 1.2% | — | 9 jul 2018 | ONOS ONOS Controller version 1.13.1 and earlier contains a Denial of Service (Service crash) vulnerability in OVSDB component in ONOS that can result in An adversary can remotely crash OVSDB service ONOS controller via… |
| CVE-2018-1000614 | Crítica (9.8) | 1.6% | — | 9 jul 2018 | ONOS ONOS Controller version 1.13.1 and earlier contains a XML External Entity (XXE) vulnerability in providers/netconf/alarm/src/main/java/org/onosproject/provider/netconf/alarm/NetconfAlarmTranslator.java that can… |
| CVE-2018-12691 | Media (6.8) | 0.70% | — | 5 jul 2018 | Time-of-check to time-of-use (TOCTOU) race condition in org.onosproject.acl (aka the access control application) in ONOS v1.13 and earlier allows attackers to bypass network access control via data plane packet… |
| CVE-2017-13763 | Alta (7.5) | 1.1% | — | 30 ago 2017 | ONOS versions 1.8.0, 1.9.0, and 1.10.0 do not restrict the amount of memory allocated. The Netty payload size is not limited. |
| CVE-2017-13762 | Media (6.1) | 1.2% | — | 30 ago 2017 | ONOS versions 1.8.0, 1.9.0, and 1.10.0 are vulnerable to XSS. |
| CVE-2015-7516 | Alta (7.5) | 3.7% | — | 24 ago 2017 | ONOS before 1.5.0 when using the ifwd app allows remote attackers to cause a denial of service (NULL pointer dereference and switch disconnect) by sending two Ethernet frames with ether_type Jumbo Frame (0x8870). |
| CVE-2017-1000081 | Crítica (9.8) | 3.0% | — | 17 jul 2017 | Linux foundation ONOS 1.9.0 is vulnerable to unauthenticated upload of applications (.oar) resulting in remote code execution. |
| CVE-2017-1000080 | Alta (7.5) | 1.0% | — | 17 jul 2017 | Linux foundation ONOS 1.9.0 allows unauthenticated use of websockets. |
| CVE-2017-1000079 | Alta (7.5) | 1.3% | — | 17 jul 2017 | Linux foundation ONOS 1.9.0 is vulnerable to a DoS. |
| CVE-2017-1000078 | Media (6.1) | 0.73% | — | 17 jul 2017 | Linux foundation ONOS 1.9 is vulnerable to XSS in the device. registration |