Linuxfoundation Opendaylight vulnerabilities

4 vulnerabilities

Known vulnerabilities in Linuxfoundation Opendaylight, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.3CVE-2015-1857linuxfoundationopendaylight
EPSS score
1.69%
The odl-mdsal-apidocs feature in OpenDaylight Helium allow remote attackers to obtain sensitive information by leveraging missing AAA restrictions.7.5CVE-2022-45930linuxfoundationopendaylight
EPSS score
0.73%
A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/DomainStore.java deleteDomain function is affected for the /auth/v1/domains/ API interface.7.5CVE-2022-45932linuxfoundationopendaylight
EPSS score
0.64%
A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/RoleStore.java deleteRole function is affected when the API interface /auth/v1/roles/ is used.7.5CVE-2022-45931linuxfoundationopendaylight
EPSS score
0.59%
A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/UserStore.java deleteUser function is affected when the API interface /auth/v1/users/ is used.