Vulnerabilities > Onap > Open Network Automation Platform > 4.0.0

DATE CVE VULNERABILITY TITLE RISK
2020-03-19 CVE-2019-12130 Missing Authentication for Critical Function vulnerability in Onap Open Network Automation Platform
In ONAP CLI through Dublin, by accessing an applicable port (30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271), an attacker gains full access to the respective ONAP services without any authentication.
network
low complexity
onap CWE-306
critical
10.0
2020-03-19 CVE-2019-12129 Missing Authentication for Critical Function vulnerability in Onap Open Network Automation Platform
In ONAP MSB through Dublin, by accessing an applicable port (30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271), an attacker gains full access to the respective ONAP services without any authentication.
network
low complexity
onap CWE-306
critical
10.0
2020-03-19 CVE-2019-12128 Missing Authentication for Critical Function vulnerability in Onap Open Network Automation Platform
In ONAP SO through Dublin, by accessing an applicable port (30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271), an attacker gains full access to the respective ONAP services without any authentication.
network
low complexity
onap CWE-306
critical
10.0
2020-03-18 CVE-2019-12124 Unspecified vulnerability in Onap Open Network Automation Platform
An issue was discovered in ONAP APPC before Dublin.
network
low complexity
onap
6.4
2020-03-18 CVE-2019-12121 Missing Encryption of Sensitive Data vulnerability in Onap Open Network Automation Platform
An issue was detected in ONAP Portal through Dublin.
network
low complexity
onap CWE-311
5.0
2020-03-18 CVE-2019-12120 Code Injection vulnerability in Onap Open Network Automation Platform
An issue was discovered in ONAP VNFSDK through Dublin.
network
low complexity
onap CWE-94
7.5
2020-03-18 CVE-2019-12119 Code Injection vulnerability in Onap Open Network Automation Platform
An issue was discovered in ONAP SDC through Dublin.
network
low complexity
onap CWE-94
7.5
2020-03-18 CVE-2019-12118 Code Injection vulnerability in Onap Open Network Automation Platform
An issue was discovered in ONAP SDC through Dublin.
network
low complexity
onap CWE-94
7.5
2020-03-18 CVE-2019-12117 Code Injection vulnerability in Onap Open Network Automation Platform
An issue was discovered in ONAP SDC through Dublin.
network
low complexity
onap CWE-94
7.5
2020-03-18 CVE-2019-12116 Code Injection vulnerability in Onap Open Network Automation Platform
An issue was discovered in ONAP SDC through Dublin.
network
low complexity
onap CWE-94
7.5