Issues

"query" parameter allows SQL injection

Multiple XSS vulnerabilities in OpenNMS webapp

Jsr160ConnectionFactory doesn't work with IPv6 address

Exception in UI when trying to change batch report schedule

Outage REST service cannot filter on event fields

SVG maps shows minimum alarm severity color instead of maximum

Database Reports Are Emailed When "Email report" is Unchecked

Security issue for all admin vaadin applications exposed as OSGI Service

Return an HTTP 303 for PUT/POST request on a ReST API is a bad practice

Ability to reorder table view columns and change the default order by column

UI to configure Events allows to persist invalid configuration

Reload import success on not specified URLs

Topology-UI shows LLDP links not correct

Topology-UI shows CDP links not correct

The ReST API code throws exceptions that turns into HTTP 500 for things that should be HTTP 400 (Bad Request)

JMX Configuration Generation misbehavior on validation error

The ICMP monitor can fail, even if valid responses are received before the timeout

ConcurrentModificationException in Spring Security call

Querying the ReST API for alarms using an invalid alarmId returns HTTP 200

RMI should only bind to localhost by default.

MBean attribute names are restricted to a specifix max length

JSoup doesn't properly parse encoded HTML character which confuses the XML Collector

Opsboard and Opspanel use wrong logo

Ifindex is not saved in bridge discovery

Enable scheduled outages to apply to events

Bridge Topology Discovery in Multi Vlan lack of design

Alarm detail filters get mixed up on the ops board

Update graph template to not include --vertical-label

JMX Configgenerator Web UI throws NPE when navigating to 2nd page.

Altering users through the WebUI (or ReST API) won't fix the associated destination paths

Remedy Integration: the custom code added to the Alarm Detail Page is gone.

RTC Ops Board category links are broken

HttpClient ignores socket timeout

Enlinkd CDP code fails to parse hex-encoded IP address string

ulimit section of install script causing problems

Counter variables reported as strings (like Net-SNMP extent) are not stored properly when using RRDtool

The reload config for Collectd might throws a ConcurrentModificationException

Expose Provisiond status through JMX

Some weak cipher suites allowed in example jetty.xml HTTPS config

HTTP Parser Full error with large number of filters on Events page

NPE in JmxRrdMigratorOffline

OpenNMS won't start anymore with 512MB of Heap Size

Incorrect unit divisor in LM-SENSORS-MIB graph definitions

nodeCategoryChanged event on already-down node makes extra nodeDown events

The command /opt/opennms/bin/ilr doesn't work

Enhance the SLF4J's MDC to include OpenNMS information for Collectd and Pollerd

Be able to specify the rescanExisting flag on provisiond-configuration.xml

GC (Allocation Failure) messages in output.log

SeleniumMonitor with PhantomJS driver needs gson JAR