Centreon

Records131All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical22CVSS 9.0–10.0

CVSS high64CVSS 7.0–8.9

Exploited now

Centreon records in CISA KEV

No Centreon vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Centreon 59 records HIGH Centreon Web 56 records HIGH Centreon Host-monitoring Widget 3 records LOW Centreon Service-monitoring Widget 3 records LOW Centreon Tactical-overview Widget 3 records LOW Open Tickets 3 records MEDIUM Awie 2 records MEDIUM Centreon Vm 2 records MEDIUM

Records

2 records in Awie · all components

TI-2025-13712 CVE-2025-15029 · GHSA-cq25-r5x7-j455

An unauthenticated user is able to introduce SQL Injection using the Awie export module

MEDIUM 63

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon Infra Monitoring (Awie export modules) allows SQL Injection to unauthenticated user.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.12961 Published 2026-01-05 Fixed in 25.10.2, 24.10.3 +1 CWE-89

TI-2025-13709 CVE-2025-15026 · GHSA-vmr4-xxx4-79m3

Unauthenticated configuration import allows administrative account creation using AWIE component

MEDIUM 49

Missing Authentication for Critical Function vulnerability in Centreon Infra Monitoring centreon-awie (Awie import module) allows Accessing Functionality Not Properly Constrained by ACLs.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00419 Published 2026-01-05 Fixed in 25.10.2, 24.10.3 +1 CWE-306

Open these records in search →