Vulnerability index

Browse CVEs

107 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Centreon Web HIGH 7.2
CVE-2024-23118EPSS 53%

Centreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary…

Fix: 22.04.19 / 22.10.17+
Fix from $1,950 2024-04-01
Centreon Web HIGH 7.2
CVE-2024-23115EPSS 67%

Centreon updateGroups SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affe…

Fix: 22.04.19 / 22.10.17+
Fix from $1,950 2024-04-01
Centreon Web HIGH 7.2
CVE-2024-23116EPSS 53%

Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on…

Fix: 22.04.19 / 22.10.17+
Fix from $1,950 2024-04-01
Centreon Web HIGH 8.8
CVE-2024-0637EPSS 72%

Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on a…

Fix: 22.04.19 / 22.10.17+
Fix from $1,950 2024-04-01
Centreon HIGH 8.8
CVE-2022-42424EPSS 76%

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this v…

Fix: 21.04.19 / 21.10.11+
Fix from $1,950 2023-03-29
Centreon HIGH 8.8
CVE-2022-42425EPSS 76%

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this v…

Fix: 21.04.19 / 21.10.11+
Fix from $1,950 2023-03-29
Centreon HIGH 8.8
CVE-2022-42426

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this v…

Fix: 21.04.19 / 21.10.11+
Fix from $1,950 2023-03-29
Centreon HIGH 8.8
CVE-2022-42427EPSS 76%

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this v…

Fix: 21.10.11 / 22.04.6+
Fix from $1,950 2023-03-29
Centreon HIGH 8.8
CVE-2022-42428

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this v…

Fix: 21.04.19 / 21.10.11+
Fix from $1,950 2023-03-29
Centreon HIGH 8.8
CVE-2022-42429EPSS 78%

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this v…

Fix: 21.04.19 / 21.10.11+
Fix from $1,950 2023-03-29
Centreon HIGH 8.8
CVE-2022-41142EPSS 86%

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this v…

Mitigation only
Fix from $1,950 2023-01-26
Centreon CRITICAL 9.8
CVE-2022-3827

A vulnerability was found in centreon. It has been declared as critical. This vulnerability affects unknown code of the file formContactGroup.php of …

Fix: 22.10.0+
Fix from $2,300 2022-11-02
Centreon MEDIUM 5.4
CVE-2022-39988

A cross-site scripting (XSS) vulnerability in Centreon 22.04.0 allows attackers to execute arbitrary web script or HTML via a crafted payload injecte…

No fix yet
Fix from $1,600 2022-10-06
Centreon MEDIUM 5.4
CVE-2022-40044

Centreon v20.10.18 was discovered to contain a cross-site scripting (XSS) vulnerability via the esc_name (Escalation Name) parameter at Configuration…

No fix yet
Fix from $1,600 2022-09-26
Centreon HIGH 8.8
CVE-2022-40043

Centreon v20.10.18 was discovered to contain a SQL injection vulnerability via the esc_name (Escalation Name) parameter at Configuration/Notification…

No fix yet
Fix from $1,950 2022-09-26
Centreon MEDIUM 5.4
CVE-2022-36194

Centreon 22.04.0 is vulnerable to Cross Site Scripting (XSS) from the function Pollers > Broker Configuration by adding a crafted payload into the na…

No fix yet
Fix from $1,600 2022-08-29
Centreon HIGH 7.2
CVE-2022-34871

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this v…

Mitigation only
Fix from $1,950 2022-08-03
Centreon MEDIUM 6.5
CVE-2022-34872

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Centreon. Authentication is required to exp…

Mitigation only
Fix from $1,600 2022-08-03
Centreon HIGH 8.8
CVE-2020-22345

/graphStatus/displayServiceStatus.php in Centreon 19.10.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the RR…

Patch available
Fix from $1,950 2021-08-18
Centreon CRITICAL 9.8
CVE-2021-37558

A SQL injection vulnerability in a MediaWiki script in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote unauthenticated attackers to exec…

Fix: 20.04.14 / 20.10.8+
Fix from $2,300 2021-08-03
Centreon HIGH 8.8
CVE-2021-37556EPSS 27%

A SQL injection vulnerability in reporting export in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-privileged) …

Fix: 20.04.14 / 20.10.8+
Fix from $1,950 2021-08-03
Centreon HIGH 8.8
CVE-2021-37557EPSS 29%

A SQL injection vulnerability in image generation in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-privileged) …

Fix: 20.04.14 / 20.10.8+
Fix from $1,950 2021-08-03
Centreon HIGH 8.8
CVE-2021-28053

An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A SQL injection vulnerability in "Configuration > Users > Contacts / Users" all…

Mitigation only
Fix from $1,950 2021-07-16
Centreon MEDIUM 5.4
CVE-2021-28054

An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A Stored Cross-Site Scripting (XSS) issue in "Configuration > Hosts" allows rem…

Mitigation only
Fix from $1,600 2021-07-16
Centreon MEDIUM 5.4
CVE-2021-27676

Centreon version 20.10.2 is affected by a cross-site scripting (XSS) vulnerability. The dep_description (Dependency Description) and dep_name (Depend…

Patch available
Fix from $1,600 2021-05-26
Centreon Web MEDIUM 6.5
CVE-2021-26804

Insecure Permissions in Centreon Web versions 19.10.18, 20.04.8, and 20.10.2 allows remote attackers to bypass validation by changing any file extens…

Mitigation only
Fix from $1,600 2021-05-04
Centreon MEDIUM 6.5
CVE-2021-28055

An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. The anti-CSRF token generation is predictable, which might allow CSRF attacks t…

Patch available
Fix from $1,600 2021-04-15
Centreon HIGH 8.8
CVE-2020-22425

Centreon 19.10-3.el7 is affected by a SQL injection vulnerability, where an authorized user is able to inject additional SQL queries to perform remot…

Mitigation only
Fix from $1,950 2021-02-15
Centreon Host Monitoring Widget MEDIUM 6.1
CVE-2020-10946

Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the page parameter to service-monitoring/…

Fix: 1.0.3 / 1.6.4+
Fix from $1,600 2020-05-27
Centreon Host Monitoring Widget MEDIUM 6.1
CVE-2020-13627

Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the widgetId parameter to service-monitor…

Fix: 1.0.3 / 1.6.4+
Fix from $1,600 2020-05-27