CVE-2008-4320: Multiple cross-site scripting (XSS) vulnerabilities in OpenNMS before 1.5.94 allow remote attackers to inje...

Security readout for executives and security teams

This is an older OpenNMS web-interface XSS issue. If an organization still runs OpenNMS before 1.5.94, a remote attacker could inject script or HTML through specific UI parameters. Business impact is mainly session abuse, user deception, or actions performed in a logged-in user's browser. Exposure is most likely in legacy OpenNMS deployments, especially where the web console is reachable by untrusted users or the internet. Modern or upgraded deployments are not shown as affected by the supplied record. Treat as a legacy exposure cleanup item unless an affected OpenNMS console is internet-facing or used by privileged operators. Prioritize discovery first because the record lacks current severity scoring and exploit evidence. Mitigation focus: Identify all OpenNMS deployments and versions.; Upgrade any pre-1.5.94 OpenNMS instance using vendor guidance.; Restrict OpenNMS web UI access to trusted networks while assessing..

Prepared

Jun 28, 2026, 11:59 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.