Linuxfoundation Opendaylight
4 CVEs affecting Linuxfoundation Opendaylight. Latest disclosed: 2022-11-27. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-45932 | High | 7.5 | 2022-11-27 | A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/RoleStore… |
CVE-2022-45931 | High | 7.5 | 2022-11-27 | A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/UserStore… |
CVE-2022-45930 | High | 7.5 | 2022-11-27 | A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/DomainSto… |
CVE-2015-1857 | Medium | 5.3 | 2018-04-27 | The odl-mdsal-apidocs feature in OpenDaylight Helium allow remote attackers to obtain sensitive information by leveraging missing AAA restrictions. |