| CVE-2023-30093 |
|
Medium |
May 04, 2023 |
A cross-site scripting (XSS) vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbitrary web s
more...
A cross-site scripting (XSS) vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter of the API documentation dashboard.
less...
|
2.5.9, 2.5.8, 2.5.7, 2.5.6, 2.5.5, 2.7.0, 2.5.4, 2.5.3, 2.6.0, 2.5.2
|
| CVE-2023-24279 |
|
Medium |
Mar 14, 2023 |
A cross-site scripting (XSS) vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbitrary web s
more...
A cross-site scripting (XSS) vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter of the API documentation dashboard.
less...
|
2.5.9, 2.5.8, 2.5.7, 2.5.6, 2.5.5, 2.7.0, 2.5.4, 2.5.3, 2.6.0, 2.5.2
|
| BDSA-2025-4748 |
|
Medium |
May 30, 2025 |
An issue in Open Network Foundation ONOS v2.7.0 allows attackers to cause a Denial of Service (DoS) via supplying crafted packets.
**Note: CVE details
more...
An issue in Open Network Foundation ONOS v2.7.0 allows attackers to cause a Denial of Service (DoS) via supplying crafted packets.
**Note: CVE details have been utilized in generating this advisory. The details of the vulnerability have not been independently verified by Black Duck CyRC.**
less...
|
|
| BDSA-2025-4747 |
|
High |
May 30, 2025 |
An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute a man-in-the-middle attack on
more...
An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute a man-in-the-middle attack on communications between fake and real hosts.
**Note: CVE details have been utilized in generating this advisory. The details of the vulnerability have not been independently verified by Black Duck CyRC.**
less...
|
|
| BDSA-2020-2184 |
|
Medium |
Aug 25, 2020 |
ONOS is vulnerable to denial-of-service (DoS) due to incomplete event handling. A remote attacker could cause a vulnerable instance of the application
more...
ONOS is vulnerable to denial-of-service (DoS) due to incomplete event handling. A remote attacker could cause a vulnerable instance of the application to crash, or otherwise become unstable, by triggering improperly handled events.
less...
|
|
| BDSA-2020-2183 |
|
High |
Aug 25, 2020 |
ONOS is vulnerable to denial-of-service (DoS) due to incomplete event handling. A remote attacker could cause a vulnerable instance of the application
more...
ONOS is vulnerable to denial-of-service (DoS) due to incomplete event handling. A remote attacker could cause a vulnerable instance of the application to crash, or otherwise become unstable, by triggering improperly handled events.
less...
|
|
| BDSA-2020-2181 |
|
Medium |
Aug 25, 2020 |
ONOS is vulnerable to denial-of-service (DoS) due to incomplete event handling. A remote attacker could cause a vulnerable instance of the application
more...
ONOS is vulnerable to denial-of-service (DoS) due to incomplete event handling. A remote attacker could cause a vulnerable instance of the application to crash, or otherwise become unstable, by triggering improperly handled events.
less...
|
|
| BDSA-2020-2172 |
|
Medium |
Aug 25, 2020 |
ONOS is vulnerable to authentication bypass by spoofing using data plane packet injection. This allows an attacker to bypass the intended access contro
more...
ONOS is vulnerable to authentication bypass by spoofing using data plane packet injection. This allows an attacker to bypass the intended access control restrictions.
less...
|
|