CVE-2019-12114: Onap Open Network Automation Platform

Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days.

An issue was discovered in ONAP HOLMES before Dublin. By accessing port 9202 of dep-holmes-engine-mgmt pod, an unauthenticated attacker (who already has access to pod-to-pod communication) may execute arbitrary code inside that pod. All ONAP Operations Manager (OOM) setups are affected.

Affected products

• Onap Open Network Automation Platform: before 4.0.0 (fixed in 4.0.0)

Published 2020-03-18. Last modified 2026-06-17.