[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2y7tFlxVsA_-h0MysXydEFqQoYv7UOjTFDkM4PELDwg":3,"g5a-ex:linuxfoundation\u002Fopen_network_operating_system@*":268,"g5a-family:linuxfoundation\u002Fopen_network_operating_system":270},{"success":4,"data":5},true,{"product":6,"versions":137,"topVulnerabilitiesByEpss":198,"kevVulnerabilities":245,"seoMetadata":246,"meta":265},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":136},"linuxfoundation","open_network_operating_system",60,11,0,"2020-02-20",[14,17,19,21,23,25,27,29,31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79,82,84,86,88,90,92,94,96,98,100,102,104,106,108,110,112,114,116,118,120,122,124,126,128,130,132,134],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"1.0.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"1.0.1",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.0",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"1.10.0",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"1.10.1",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"1.10.10",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"1.10.11",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"1.10.12",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"1.10.2",{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},"1.10.3",{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},"1.10.4",{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},"1.10.5",{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},"1.10.6",{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},"1.10.7",{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},"1.10.8",{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},"1.10.9",{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},"1.11.0",{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},"1.11.1",{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},"1.11.2",{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},"1.12.0",{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},"1.12.1",{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},"1.12.2",{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},"1.13.0",{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},"1.13.1",{"version":64,"cve_count":11,"kev_count":11,"has_kev":16},"1.13.2",{"version":66,"cve_count":11,"kev_count":11,"has_kev":16},"1.13.3",{"version":68,"cve_count":11,"kev_count":11,"has_kev":16},"1.13.4",{"version":70,"cve_count":11,"kev_count":11,"has_kev":16},"1.13.5",{"version":72,"cve_count":11,"kev_count":11,"has_kev":16},"1.13.6",{"version":74,"cve_count":11,"kev_count":11,"has_kev":16},"1.13.7",{"version":76,"cve_count":11,"kev_count":11,"has_kev":16},"1.13.8",{"version":78,"cve_count":11,"kev_count":11,"has_kev":16},"1.13.9",{"version":80,"cve_count":81,"kev_count":11,"has_kev":16},"1.14.0",6,{"version":83,"cve_count":11,"kev_count":11,"has_kev":16},"1.14.1",{"version":85,"cve_count":11,"kev_count":11,"has_kev":16},"1.15.0",{"version":87,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.0",{"version":89,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.1",{"version":91,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.2",{"version":93,"cve_count":11,"kev_count":11,"has_kev":16},"1.3.0",{"version":95,"cve_count":11,"kev_count":11,"has_kev":16},"1.4.0",{"version":97,"cve_count":11,"kev_count":11,"has_kev":16},"1.5.0",{"version":99,"cve_count":11,"kev_count":11,"has_kev":16},"1.5.1",{"version":101,"cve_count":11,"kev_count":11,"has_kev":16},"1.6.0",{"version":103,"cve_count":11,"kev_count":11,"has_kev":16},"1.7.0",{"version":105,"cve_count":11,"kev_count":11,"has_kev":16},"1.7.1",{"version":107,"cve_count":11,"kev_count":11,"has_kev":16},"1.8.0",{"version":109,"cve_count":11,"kev_count":11,"has_kev":16},"1.8.1",{"version":111,"cve_count":11,"kev_count":11,"has_kev":16},"1.8.2",{"version":113,"cve_count":11,"kev_count":11,"has_kev":16},"1.8.3",{"version":115,"cve_count":11,"kev_count":11,"has_kev":16},"1.8.4",{"version":117,"cve_count":11,"kev_count":11,"has_kev":16},"1.8.5",{"version":119,"cve_count":11,"kev_count":11,"has_kev":16},"1.8.6",{"version":121,"cve_count":11,"kev_count":11,"has_kev":16},"1.8.7",{"version":123,"cve_count":11,"kev_count":11,"has_kev":16},"1.8.8",{"version":125,"cve_count":11,"kev_count":11,"has_kev":16},"1.8.9",{"version":127,"cve_count":11,"kev_count":11,"has_kev":16},"1.9.0",{"version":129,"cve_count":11,"kev_count":11,"has_kev":16},"1.9.1",{"version":131,"cve_count":11,"kev_count":11,"has_kev":16},"1.9.2",{"version":133,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.0",{"version":135,"cve_count":11,"kev_count":11,"has_kev":16},"2.1.0","Open Network Operating System by Linuxfoundation is a technology product with 60 tracked versions and 11 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},{"version":64,"cve_count":11,"kev_count":11,"has_kev":16},{"version":66,"cve_count":11,"kev_count":11,"has_kev":16},{"version":68,"cve_count":11,"kev_count":11,"has_kev":16},{"version":70,"cve_count":11,"kev_count":11,"has_kev":16},{"version":72,"cve_count":11,"kev_count":11,"has_kev":16},{"version":74,"cve_count":11,"kev_count":11,"has_kev":16},{"version":76,"cve_count":11,"kev_count":11,"has_kev":16},{"version":78,"cve_count":11,"kev_count":11,"has_kev":16},{"version":80,"cve_count":81,"kev_count":11,"has_kev":16},{"version":83,"cve_count":11,"kev_count":11,"has_kev":16},{"version":85,"cve_count":11,"kev_count":11,"has_kev":16},{"version":87,"cve_count":11,"kev_count":11,"has_kev":16},{"version":89,"cve_count":11,"kev_count":11,"has_kev":16},{"version":91,"cve_count":11,"kev_count":11,"has_kev":16},{"version":93,"cve_count":11,"kev_count":11,"has_kev":16},{"version":95,"cve_count":11,"kev_count":11,"has_kev":16},{"version":97,"cve_count":11,"kev_count":11,"has_kev":16},{"version":99,"cve_count":11,"kev_count":11,"has_kev":16},{"version":101,"cve_count":11,"kev_count":11,"has_kev":16},{"version":103,"cve_count":11,"kev_count":11,"has_kev":16},{"version":105,"cve_count":11,"kev_count":11,"has_kev":16},{"version":107,"cve_count":11,"kev_count":11,"has_kev":16},{"version":109,"cve_count":11,"kev_count":11,"has_kev":16},{"version":111,"cve_count":11,"kev_count":11,"has_kev":16},{"version":113,"cve_count":11,"kev_count":11,"has_kev":16},{"version":115,"cve_count":11,"kev_count":11,"has_kev":16},{"version":117,"cve_count":11,"kev_count":11,"has_kev":16},{"version":119,"cve_count":11,"kev_count":11,"has_kev":16},{"version":121,"cve_count":11,"kev_count":11,"has_kev":16},{"version":123,"cve_count":11,"kev_count":11,"has_kev":16},{"version":125,"cve_count":11,"kev_count":11,"has_kev":16},{"version":127,"cve_count":11,"kev_count":11,"has_kev":16},{"version":129,"cve_count":11,"kev_count":11,"has_kev":16},{"version":131,"cve_count":11,"kev_count":11,"has_kev":16},{"version":133,"cve_count":11,"kev_count":11,"has_kev":16},{"version":135,"cve_count":11,"kev_count":11,"has_kev":16},[199,207,214,218,221,224,227,230,235,242],{"cveId":200,"description":201,"publishedDate":202,"cvssScore":203,"cvssVersion":204,"severity":205,"isKev":16,"epssScore":206},"CVE-2019-1010245","The Linux Foundation ONOS SDN Controller 1.15 and earlier versions is affected by: Improper Input Validation. The impact is: A remote attacker can execute arbitrary commands on the controller. The component is: apps\u002Fyang\u002Fsrc\u002Fmain\u002Fjava\u002Forg\u002Fonosproject\u002Fyang\u002Fimpl\u002FYangLiveCompilerManager.java. The attack vector is: network connectivity. The fixed version is: 1.15.","2019-07-19",9.8,"v3.0","Critical",0.03612,{"cveId":208,"description":209,"publishedDate":12,"cvssScore":210,"cvssVersion":211,"severity":212,"isKev":16,"epssScore":213},"CVE-2019-16300","An issue was discovered in Open Network Operating System (ONOS) 1.14. In the access control application (org.onosproject.acl), the host event listener does not handle the following event types: HOST_REMOVED. In combination with other applications, this could lead to the absence of intended code execution.",7.5,"v3.1","High",0.02004,{"cveId":215,"description":216,"publishedDate":12,"cvssScore":210,"cvssVersion":211,"severity":212,"isKev":16,"epssScore":217},"CVE-2019-16302","An issue was discovered in Open Network Operating System (ONOS) 1.14. In the Ethernet VPN application (org.onosproject.evpnopenflow), the host event listener does not handle the following event types: HOST_MOVED, HOST_UPDATED. In combination with other applications, this could lead to the absence of intended code execution.",0.01673,{"cveId":219,"description":220,"publishedDate":12,"cvssScore":210,"cvssVersion":211,"severity":212,"isKev":16,"epssScore":217},"CVE-2019-16297","An issue was discovered in Open Network Operating System (ONOS) 1.14. In the P4 tutorial application (org.onosproject.p4tutorial), the host event listener does not handle the following event types: HOST_MOVED, HOST_REMOVED, HOST_UPDATED. In combination with other applications, this could lead to the absence of intended code execution.",{"cveId":222,"description":223,"publishedDate":12,"cvssScore":210,"cvssVersion":211,"severity":212,"isKev":16,"epssScore":217},"CVE-2019-16298","An issue was discovered in Open Network Operating System (ONOS) 1.14. In the virtual broadband network gateway application (org.onosproject.virtualbng), the host event listener does not handle the following event types: HOST_MOVED, HOST_REMOVED, HOST_UPDATED. In combination with other applications, this could lead to the absence of intended code execution.",{"cveId":225,"description":226,"publishedDate":12,"cvssScore":210,"cvssVersion":211,"severity":212,"isKev":16,"epssScore":217},"CVE-2019-16299","An issue was discovered in Open Network Operating System (ONOS) 1.14. In the mobility application (org.onosproject.mobility), the host event listener does not handle the following event types: HOST_ADDED, HOST_REMOVED, HOST_UPDATED. In combination with other applications, this could lead to the absence of intended code execution.",{"cveId":228,"description":229,"publishedDate":12,"cvssScore":210,"cvssVersion":211,"severity":212,"isKev":16,"epssScore":217},"CVE-2019-16301","An issue was discovered in Open Network Operating System (ONOS) 1.14. In the virtual tenant network application (org.onosproject.vtn), the host event listener does not handle the following event types: HOST_MOVED. In combination with other applications, this could lead to the absence of intended code execution.",{"cveId":231,"description":232,"publishedDate":233,"cvssScore":203,"cvssVersion":204,"severity":205,"isKev":16,"epssScore":234},"CVE-2019-1010234","The Linux Foundation ONOS 1.15.0 and ealier is affected by: Improper Input Validation. The impact is: The attacker can remotely execute any commands by sending malicious http request to the controller. The component is: Method runJavaCompiler in YangLiveCompilerManager.java. The attack vector is: network connectivity.","2019-07-22",0.0167,{"cveId":236,"description":237,"publishedDate":238,"cvssScore":239,"cvssVersion":204,"severity":240,"isKev":16,"epssScore":241},"CVE-2019-1010250","The Linux Foundation ONOS 2.0.0 and earlier is affected by: Poor Input-validation. The impact is: A network administrator (or attacker) can install unintended flow rules in the switch by mistake. The component is: createFlow() and createFlows() functions in FlowWebResource.java (RESTful service). The attack vector is: network management and connectivity.","2019-07-18",4.9,"Medium",0.01059,{"cveId":243,"description":244,"publishedDate":238,"cvssScore":239,"cvssVersion":204,"severity":240,"isKev":16,"epssScore":241},"CVE-2019-1010252","The Linux Foundation ONOS 2.0.0 and earlier is affected by: Poor Input-validation. The impact is: A network administrator (or attacker) can install unintended flow rules in the switch by mistake. The component is: applyFlowRules() and apply() functions in FlowRuleManager.java. The attack vector is: network management and connectivity.",[],{"title":247,"metaDescription":248,"keywords":249,"structuredData":250},"Open Network Operating System by Linuxfoundation - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Open Network Operating System by Linuxfoundation covering 60 versions with 11 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Open Network Operating System vulnerabilities, Open Network Operating System security, Open Network Operating System CVE, Linuxfoundation Open Network Operating System, Open Network Operating System threat intelligence, Linuxfoundation security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":251,"@type":252,"name":253,"description":248,"url":254,"manufacturer":255,"applicationCategory":259,"softwareVersion":260,"mainEntity":261},"https:\u002F\u002Fschema.org","SoftwareApplication","Open Network Operating System","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Flinuxfoundation\u002Fopen_network_operating_system",{"@type":256,"name":257,"url":258},"Organization","Linuxfoundation","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Flinuxfoundation","Security Software","60 versions tracked",{"@type":262,"name":263,"description":264,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Open Network Operating System Security Vulnerabilities","Security vulnerabilities affecting Open Network Operating System by Linuxfoundation",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":266,"apiVersion":267},"2026-10-19T17:52:46.712Z","3.0",{"rows":269,"total":11,"capped":16,"failed":11},[],[]]