Browse CVEs

HIGH 7.2 CVE-2024-23118EPSS 53% Centreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary… Centreon Web 22.04.19 / 22.10.17+ Fix from $1,9502024-04-01 HIGH 7.2 CVE-2024-23115EPSS 67% Centreon updateGroups SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affe… Centreon Web 22.04.19 / 22.10.17+ Fix from $1,9502024-04-01 HIGH 7.2 CVE-2024-23116EPSS 53% Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… Centreon Web 22.04.19 / 22.10.17+ Fix from $1,9502024-04-01 HIGH 8.8 CVE-2024-0637EPSS 72% Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on a… Centreon Web 22.04.19 / 22.10.17+ Fix from $1,9502024-04-01 HIGH 8.8 CVE-2022-42424EPSS 76% This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this v… Centreon 21.04.19 / 21.10.11+ Fix from $1,9502023-03-29 HIGH 8.8 CVE-2022-42425EPSS 76% This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this v… Centreon 21.04.19 / 21.10.11+ Fix from $1,9502023-03-29 HIGH 8.8 CVE-2022-42426 This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this v… Centreon 21.04.19 / 21.10.11+ Fix from $1,9502023-03-29 HIGH 8.8 CVE-2022-42427EPSS 76% This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this v… Centreon 21.10.11 / 22.04.6+ Fix from $1,9502023-03-29 HIGH 8.8 CVE-2022-42428 This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this v… Centreon 21.04.19 / 21.10.11+ Fix from $1,9502023-03-29 HIGH 8.8 CVE-2022-42429EPSS 78% This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this v… Centreon 21.04.19 / 21.10.11+ Fix from $1,9502023-03-29 HIGH 8.8 CVE-2022-41142EPSS 86% This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this v… Centreon Mitigation only Fix from $1,9502023-01-26 CRITICAL 9.8 CVE-2022-3827 A vulnerability was found in centreon. It has been declared as critical. This vulnerability affects unknown code of the file formContactGroup.php of … Centreon 22.10.0+ Fix from $2,3002022-11-02 MEDIUM 5.4 CVE-2022-39988 A cross-site scripting (XSS) vulnerability in Centreon 22.04.0 allows attackers to execute arbitrary web script or HTML via a crafted payload injecte… Centreon No fix yet Fix from $1,6002022-10-06 MEDIUM 5.4 CVE-2022-40044 Centreon v20.10.18 was discovered to contain a cross-site scripting (XSS) vulnerability via the esc_name (Escalation Name) parameter at Configuration… Centreon No fix yet Fix from $1,6002022-09-26 HIGH 8.8 CVE-2022-40043 Centreon v20.10.18 was discovered to contain a SQL injection vulnerability via the esc_name (Escalation Name) parameter at Configuration/Notification… Centreon No fix yet Fix from $1,9502022-09-26 MEDIUM 5.4 CVE-2022-36194 Centreon 22.04.0 is vulnerable to Cross Site Scripting (XSS) from the function Pollers > Broker Configuration by adding a crafted payload into the na… Centreon No fix yet Fix from $1,6002022-08-29 HIGH 7.2 CVE-2022-34871 This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this v… Centreon Mitigation only Fix from $1,9502022-08-03 MEDIUM 6.5 CVE-2022-34872 This vulnerability allows remote attackers to disclose sensitive information on affected installations of Centreon. Authentication is required to exp… Centreon Mitigation only Fix from $1,6002022-08-03 HIGH 8.8 CVE-2020-22345 /graphStatus/displayServiceStatus.php in Centreon 19.10.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the RR… Centreon Patch available Fix from $1,9502021-08-18 CRITICAL 9.8 CVE-2021-37558 A SQL injection vulnerability in a MediaWiki script in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote unauthenticated attackers to exec… Centreon 20.04.14 / 20.10.8+ Fix from $2,3002021-08-03 HIGH 8.8 CVE-2021-37556EPSS 27% A SQL injection vulnerability in reporting export in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-privileged) … Centreon 20.04.14 / 20.10.8+ Fix from $1,9502021-08-03 HIGH 8.8 CVE-2021-37557EPSS 29% A SQL injection vulnerability in image generation in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-privileged) … Centreon 20.04.14 / 20.10.8+ Fix from $1,9502021-08-03 HIGH 8.8 CVE-2021-28053 An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A SQL injection vulnerability in "Configuration > Users > Contacts / Users" all… Centreon Mitigation only Fix from $1,9502021-07-16 MEDIUM 5.4 CVE-2021-28054 An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A Stored Cross-Site Scripting (XSS) issue in "Configuration > Hosts" allows rem… Centreon Mitigation only Fix from $1,6002021-07-16 MEDIUM 5.4 CVE-2021-27676 Centreon version 20.10.2 is affected by a cross-site scripting (XSS) vulnerability. The dep_description (Dependency Description) and dep_name (Depend… Centreon Patch available Fix from $1,6002021-05-26 MEDIUM 6.5 CVE-2021-26804 Insecure Permissions in Centreon Web versions 19.10.18, 20.04.8, and 20.10.2 allows remote attackers to bypass validation by changing any file extens… Centreon Web Mitigation only Fix from $1,6002021-05-04 MEDIUM 6.5 CVE-2021-28055 An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. The anti-CSRF token generation is predictable, which might allow CSRF attacks t… Centreon Patch available Fix from $1,6002021-04-15 HIGH 8.8 CVE-2020-22425 Centreon 19.10-3.el7 is affected by a SQL injection vulnerability, where an authorized user is able to inject additional SQL queries to perform remot… Centreon Mitigation only Fix from $1,9502021-02-15 MEDIUM 6.1 CVE-2020-10946 Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the page parameter to service-monitoring/… Centreon Host Monitoring Widget 1.0.3 / 1.6.4+ Fix from $1,6002020-05-27 MEDIUM 6.1 CVE-2020-13627 Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the widgetId parameter to service-monitor… Centreon Host Monitoring Widget 1.0.3 / 1.6.4+ Fix from $1,6002020-05-27