Browse CVEs

HIGH 7.2 CVE-2024-39842 A SQL injection vulnerability in Centreon 24.04.2 allows a remote high-privileged attacker to execute arbitrary SQL command via user massive changes … Centreon Mitigation only Fix from $1,9502024-09-23 MEDIUM 6.7 CVE-2024-39843 A SQL injection vulnerability in Centreon 24.04.2 allows a remote high-privileged attacker to execute arbitrary SQL command via create user form inpu… Centreon Mitigation only Fix from $1,6002024-09-23 HIGH 8.8 CVE-2022-41142EPSS 86% This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this v… Centreon Mitigation only Fix from $1,9502023-01-26 MEDIUM 5.4 CVE-2022-39988 A cross-site scripting (XSS) vulnerability in Centreon 22.04.0 allows attackers to execute arbitrary web script or HTML via a crafted payload injecte… Centreon No fix yet Fix from $1,6002022-10-06 MEDIUM 5.4 CVE-2022-40044 Centreon v20.10.18 was discovered to contain a cross-site scripting (XSS) vulnerability via the esc_name (Escalation Name) parameter at Configuration… Centreon No fix yet Fix from $1,6002022-09-26 HIGH 8.8 CVE-2022-40043 Centreon v20.10.18 was discovered to contain a SQL injection vulnerability via the esc_name (Escalation Name) parameter at Configuration/Notification… Centreon No fix yet Fix from $1,9502022-09-26 MEDIUM 5.4 CVE-2022-36194 Centreon 22.04.0 is vulnerable to Cross Site Scripting (XSS) from the function Pollers > Broker Configuration by adding a crafted payload into the na… Centreon No fix yet Fix from $1,6002022-08-29 HIGH 7.2 CVE-2022-34871 This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this v… Centreon Mitigation only Fix from $1,9502022-08-03 MEDIUM 6.5 CVE-2022-34872 This vulnerability allows remote attackers to disclose sensitive information on affected installations of Centreon. Authentication is required to exp… Centreon Mitigation only Fix from $1,6002022-08-03 HIGH 8.8 CVE-2021-28053 An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A SQL injection vulnerability in "Configuration > Users > Contacts / Users" all… Centreon Mitigation only Fix from $1,9502021-07-16 MEDIUM 5.4 CVE-2021-28054 An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A Stored Cross-Site Scripting (XSS) issue in "Configuration > Hosts" allows rem… Centreon Mitigation only Fix from $1,6002021-07-16 MEDIUM 6.5 CVE-2021-26804 Insecure Permissions in Centreon Web versions 19.10.18, 20.04.8, and 20.10.2 allows remote attackers to bypass validation by changing any file extens… Centreon Web Mitigation only Fix from $1,6002021-05-04 HIGH 8.8 CVE-2020-22425 Centreon 19.10-3.el7 is affected by a SQL injection vulnerability, where an authorized user is able to inject additional SQL queries to perform remot… Centreon Mitigation only Fix from $1,9502021-02-15 HIGH 8.8 CVE-2020-9463 Centreon 19.10 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the server_ip field in JSON data in an … Centreon No fix yet Fix from $1,9502020-02-28 HIGH 8.8 CVE-2019-17501 Centreon 19.04 allows attackers to execute arbitrary OS commands via the Command Line field of main.php?p=60807&type=4 (aka the Configuration > Comma… Centreon No fix yet Fix from $1,9502019-10-14 HIGH 7.5 CVE-2007-6485EPSS 11% Multiple PHP remote file inclusion vulnerabilities in Centreon 1.4.1 (aka Oreon 1.4) allow remote attackers to execute arbitrary PHP code via a URL i… Centreon No fix yet Fix from $1,9502007-12-20