Vulnerabilities > Opennetworking > Onos > 1.4.0

DATE CVE VULNERABILITY TITLE RISK
2020-02-20 CVE-2019-11189 Authentication Bypass by Spoofing vulnerability in Opennetworking Onos
Authentication Bypass by Spoofing in org.onosproject.acl (access control) and org.onosproject.mobility (host mobility) in ONOS v2.0 and earlier allows attackers to bypass network access control via data plane packet injection.
network
low complexity
opennetworking CWE-290
5.0
5.0
2018-07-23 CVE-2018-1999020 Path Traversal vulnerability in Opennetworking Onos
Open Networking Foundation (ONF) ONOS version 1.13.2 and earlier version contains a Directory Traversal vulnerability in core/common/src/main/java/org/onosproject/common/app/ApplicationArchive.java line 35 that can result in arbitrary file deletion (overwrite). 		5.8
5.8