Centreon

Records131All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical22CVSS 9.0–10.0

CVSS high64CVSS 7.0–8.9

Exploited now

Centreon records in CISA KEV

No Centreon vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Centreon 59 records HIGH Centreon Web 56 records HIGH Centreon Host-monitoring Widget 3 records LOW Centreon Service-monitoring Widget 3 records LOW Centreon Tactical-overview Widget 3 records LOW Open Tickets 3 records MEDIUM Awie 2 records MEDIUM Centreon Vm 2 records MEDIUM

Records

131 records

TI-2022-19661 CVE-2022-41142 · GHSA-gg7f-698x-gg7c

SQL injection in Centreon

HIGH 81

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.85031 Published 2023-01-26 No fix listed CWE-89

TI-2022-20634 CVE-2022-42429 · GHSA-w7wq-mfjm-crgc

SQL injection in Centreon

HIGH 79

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.76134 Published 2023-03-29 No fix listed CWE-89

TI-2022-20632 CVE-2022-42427 · GHSA-fh4c-rwgp-mc5v

SQL injection in Centreon

HIGH 79

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.76134 Published 2023-03-29 No fix listed CWE-89

TI-2022-20630 CVE-2022-42425 · GHSA-c459-crcf-rfqh

SQL injection in Centreon

HIGH 79

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.76134 Published 2023-03-29 No fix listed CWE-89

TI-2022-20629 CVE-2022-42424 · GHSA-mwjw-gjjg-g95f

SQL injection in Centreon

HIGH 79

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.76134 Published 2023-03-29 No fix listed CWE-89

TI-2024-00588 CVE-2024-0637 · GHSA-22v7-v3mj-pm8r

SQL injection in Centreon

HIGH 78

Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.72319 Published 2024-04-01 Fixed in 22.10.15 CWE-89

TI-2024-15236 CVE-2024-23115 · GHSA-qjvm-p5vg-437c

SQL injection in Centreon

HIGH 70

Centreon updateGroups SQL Injection Remote Code Execution Vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.67493 Published 2024-04-01 Fixed in 22.10.15 CWE-89

TI-2024-05319 CVE-2024-5725 · GHSA-67c5-gg2x-j6wg

SQL injection in Centreon

HIGH 70

Centreon initCurveList SQL Injection Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.47368 Published 2024-08-21 No fix listed CWE-89

TI-2024-05317 CVE-2024-5723 · GHSA-g6mm-5rjg-vwhr

SQL injection in Centreon

HIGH 68

Centreon updateServiceHost SQL Injection Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.40669 Published 2024-08-21 No fix listed CWE-89

TI-2024-21388 CVE-2024-32501 · GHSA-6fcq-8rv2-rc2j

A SQL Injection vulnerability exists in the updateServiceHost functionality in Centreon…

HIGH 67

A SQL Injection vulnerability exists in the updateServiceHost functionality in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x before 22.10.23.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.19187 Published 2024-08-23 No fix listed CWE-89

TI-2024-15239 CVE-2024-23118 · GHSA-2j4g-v4fv-rhwg

SQL injection in Centreon

HIGH 66

Centreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.53411 Published 2024-04-01 Fixed in 22.10.15 CWE-89

TI-2024-15238 CVE-2024-23117 · GHSA-j8hg-v5qv-9m28

SQL injection in Centreon

HIGH 66

Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.53411 Published 2024-04-01 Fixed in 22.10.15 CWE-89

TI-2024-15237 CVE-2024-23116 · GHSA-j4pc-vqvc-4p9x

SQL injection in Centreon

HIGH 66

Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.53411 Published 2024-04-01 Fixed in 22.10.15 CWE-89

TI-2025-13712 CVE-2025-15029 · GHSA-cq25-r5x7-j455

An unauthenticated user is able to introduce SQL Injection using the Awie export module

MEDIUM 63

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon Infra Monitoring (Awie export modules) allows SQL Injection to unauthenticated user.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.12961 Published 2026-01-05 Fixed in 25.10.2, 24.10.3 +1 CWE-89

TI-2019-09757 CVE-2019-13024 · GHSA-v39g-xvv3-gr6r

Centreon 18.x before 18.10.6, 19.x before 19.04.3, and Centreon web before 2.8.29 allows…

MEDIUM 62

Centreon 18.x before 18.10.6, 19.x before 19.04.3, and Centreon web before 2.8.29 allows the attacker to execute arbitrary system commands by using the value "init_script"-"Monitoring Engine Binary" in main.get.php to in…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.31645 Published 2019-07-01 No fix listed CWE-77

TI-2021-15447 CVE-2021-37557 · GHSA-fj6w-rq8q-jhh3

A SQL injection vulnerability in image generation in Centreon before 20.04.14, 20.10.8…

MEDIUM 60

A SQL injection vulnerability in image generation in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-privileged) attackers to execute arbitrary SQL commands via the include/views/graph…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.27437 Published 2021-08-03 No fix listed CWE-89

TI-2021-15446 CVE-2021-37556 · GHSA-g57w-9vhh-8r5p

A SQL injection vulnerability in reporting export in Centreon before 20.04.14, 20.10.8…

MEDIUM 60

A SQL injection vulnerability in reporting export in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-privileged) attackers to execute arbitrary SQL commands via the include/reporting/d…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.27437 Published 2021-08-03 No fix listed CWE-89

TI-2019-11408 CVE-2019-15298 · GHSA-xr82-vj36-ch3w

A problem was found in Centreon Web through 19.04.3.

MEDIUM 60

A problem was found in Centreon Web through 19.04.3.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.26624 Published 2019-11-27 No fix listed CWE-78

TI-2025-05388 CVE-2025-5965 · GHSA-4vv3-prpf-hx46

RCE via the backup feature available only to user with high privilege

MEDIUM 56

In the backup parameters, a user with high privilege is able to concatenate custom instructions to the backup setup.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.28229 Published 2026-01-05 Fixed in 25.10.2, 24.10.15 +1 CWE-78

TI-2025-05371 CVE-2025-5946 · GHSA-mpw2-f23v-c9fv

RCE via the poller reload feature available only to user with high privilege

MEDIUM 54

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Centreon Infra Monitoring (Poller reload setup in the configuration modules) allows OS Command Injection.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.13508 Published 2025-10-14 Fixed in 24.10.13, 24.04.18 +1 CWE-78

TI-2019-12336 CVE-2019-16405 · GHSA-4f26-v6fr-9hmp

Centreon Web before 2.8.30, 18.10.x before 18.10.8, 19.04.x before 19.04.5 and 19.10.x…

MEDIUM 54

Centreon Web before 2.8.30, 18.10.x before 18.10.8, 19.04.x before 19.04.5 and 19.10.x before 19.10.2 allows Remote Code Execution by an administrator who can modify Macro Expression location settings.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.27002 Published 2019-11-21 Fixed in 18.10.8, 19.04.5 CWE-20

TI-2019-14196 CVE-2019-19699 · GHSA-wwvc-xq5p-g468

There is Authenticated remote code execution in Centreon Infrastructure Monitoring…

MEDIUM 53

There is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers misconfiguration, leading to system compromise via apache crontab misconfiguration, This allows the ap…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.25655 Published 2020-04-06 No fix listed CWE-269

TI-2025-13709 CVE-2025-15026 · GHSA-vmr4-xxx4-79m3

Unauthenticated configuration import allows administrative account creation using AWIE component

MEDIUM 49

Missing Authentication for Critical Function vulnerability in Centreon Infra Monitoring centreon-awie (Awie import module) allows Accessing Functionality Not Properly Constrained by ACLs.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00419 Published 2026-01-05 Fixed in 25.10.2, 24.10.3 +1 CWE-306

TI-2018-08290 CVE-2018-11587 · GHSA-c8qc-cp8v-prpx

There is Remote Code Execution in Centreon 3.4.6 including Centreon Web 2.8.23 via the…

MEDIUM 49

There is Remote Code Execution in Centreon 3.4.6 including Centreon Web 2.8.23 via the RPN value in the Virtual Metric form in centreonGraph.class.php.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04182 Published 2018-06-25 Fixed in 2.8.24 CWE-94

TI-2024-22337 CVE-2024-33854 · GHSA-vcw3-hwj8-8j82

A SQL Injection vulnerability exists in the Graph Template component in Centreon Web…

MEDIUM 48

A SQL Injection vulnerability exists in the Graph Template component in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x before 22.10.23.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00488 Published 2024-08-23 No fix listed CWE-89

Open these records in search →