Vulnerability index

Browse CVEs

16 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Centreon HIGH 7.2
CVE-2024-39842

A SQL injection vulnerability in Centreon 24.04.2 allows a remote high-privileged attacker to execute arbitrary SQL command via user massive changes …

Mitigation only
Fix from $1,950 2024-09-23
Centreon MEDIUM 6.7
CVE-2024-39843

A SQL injection vulnerability in Centreon 24.04.2 allows a remote high-privileged attacker to execute arbitrary SQL command via create user form inpu…

Mitigation only
Fix from $1,600 2024-09-23
Centreon HIGH 8.8
CVE-2022-41142EPSS 86%

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this v…

Mitigation only
Fix from $1,950 2023-01-26
Centreon MEDIUM 5.4
CVE-2022-39988

A cross-site scripting (XSS) vulnerability in Centreon 22.04.0 allows attackers to execute arbitrary web script or HTML via a crafted payload injecte…

No fix yet
Fix from $1,600 2022-10-06
Centreon MEDIUM 5.4
CVE-2022-40044

Centreon v20.10.18 was discovered to contain a cross-site scripting (XSS) vulnerability via the esc_name (Escalation Name) parameter at Configuration…

No fix yet
Fix from $1,600 2022-09-26
Centreon HIGH 8.8
CVE-2022-40043

Centreon v20.10.18 was discovered to contain a SQL injection vulnerability via the esc_name (Escalation Name) parameter at Configuration/Notification…

No fix yet
Fix from $1,950 2022-09-26
Centreon MEDIUM 5.4
CVE-2022-36194

Centreon 22.04.0 is vulnerable to Cross Site Scripting (XSS) from the function Pollers > Broker Configuration by adding a crafted payload into the na…

No fix yet
Fix from $1,600 2022-08-29
Centreon HIGH 7.2
CVE-2022-34871

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this v…

Mitigation only
Fix from $1,950 2022-08-03
Centreon MEDIUM 6.5
CVE-2022-34872

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Centreon. Authentication is required to exp…

Mitigation only
Fix from $1,600 2022-08-03
Centreon HIGH 8.8
CVE-2021-28053

An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A SQL injection vulnerability in "Configuration > Users > Contacts / Users" all…

Mitigation only
Fix from $1,950 2021-07-16
Centreon MEDIUM 5.4
CVE-2021-28054

An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A Stored Cross-Site Scripting (XSS) issue in "Configuration > Hosts" allows rem…

Mitigation only
Fix from $1,600 2021-07-16
Centreon Web MEDIUM 6.5
CVE-2021-26804

Insecure Permissions in Centreon Web versions 19.10.18, 20.04.8, and 20.10.2 allows remote attackers to bypass validation by changing any file extens…

Mitigation only
Fix from $1,600 2021-05-04
Centreon HIGH 8.8
CVE-2020-22425

Centreon 19.10-3.el7 is affected by a SQL injection vulnerability, where an authorized user is able to inject additional SQL queries to perform remot…

Mitigation only
Fix from $1,950 2021-02-15
Centreon HIGH 8.8
CVE-2020-9463

Centreon 19.10 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the server_ip field in JSON data in an …

No fix yet
Fix from $1,950 2020-02-28
Centreon HIGH 8.8
CVE-2019-17501

Centreon 19.04 allows attackers to execute arbitrary OS commands via the Command Line field of main.php?p=60807&type=4 (aka the Configuration > Comma…

No fix yet
Fix from $1,950 2019-10-14
Centreon HIGH 7.5
CVE-2007-6485EPSS 11%

Multiple PHP remote file inclusion vulnerabilities in Centreon 1.4.1 (aka Oreon 1.4) allow remote attackers to execute arbitrary PHP code via a URL i…

No fix yet
Fix from $1,950 2007-12-20