Meridian, formerly known as SEDC and founded in 1993, provides customer-engagement and cybersecurity technology for utilities.
by Meridian · meridianconnect.com · source ↗
A denial of service vulnerability exists in the XML parsing of multiple versions of OpenNMS Meridian and Horizon. OpenNMS parsed XML without an effective limit on entity expansion. A document with a D…
An authorization bypass vulnerability exists in the REST API of multiple versions of OpenNMS Meridian and Horizon. The /rest/** Spring Security filter chains authorize requests with intercept-url rule…
No datasheets, whitepapers, case studies, videos, or demos linked yet.
A SQL injection vulnerability exists in the JasperReports-based reporting feature of multiple versions of OpenNMS Meridian and Horizon. A low-privileged authenticated user (ROLE_USER) can run the ship…