Junglewise Threat Intelligence

CVE-2021-3396: OpenNMS Horizon RCE via JEXL2 expression

CVE-2021-3396 · Severity: low · CVSS 3.1 · Published 2022-05-24

Technologies: org.opennms:opennms (Maven). Vendors: Maven.

Executive brief

OpenNMS Horizon RCE via JEXL2 expression

Affected products

  • Maven org.opennms:opennms-provision
  • Maven org.opennms:opennms-util
  • Maven org.opennms:opennms
  • Maven org.opennms.features:org.opennms.features.measurements

Related threats