Priority LOW 36
A SQL injection vulnerability in Centreon 24.04.2 allows a remote high-privileged attacker to execute arbitrary SQL command via create user form inputs.
CVSS 3.1MEDIUM 6.7· Network · High privileges · No interaction · EPSS 0.02137 · Published 2024-09-23 · No fix listed CWE-89
Priority LOW 37
A SQL injection vulnerability in Centreon 24.04.2 allows a remote high-privileged attacker to execute arbitrary SQL command via user massive changes inputs.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01775 · Published 2024-09-23 · No fix listed CWE-89
Priority HIGH 79
This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.76134 · Published 2023-03-29 · No fix listed CWE-89
Priority MEDIUM 45
This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02893 · Published 2023-03-29 · No fix listed CWE-89
Priority HIGH 79
This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.76134 · Published 2023-03-29 · No fix listed CWE-89
Priority MEDIUM 45
This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02893 · Published 2023-03-29 · No fix listed CWE-89
Priority HIGH 79
This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.76134 · Published 2023-03-29 · No fix listed CWE-89
Priority HIGH 79
This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.76134 · Published 2023-03-29 · No fix listed CWE-89
Priority HIGH 81
This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.85031 · Published 2023-01-26 · No fix listed CWE-89
Priority MEDIUM 44
A vulnerability was found in centreon.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01018 · Published 2022-11-02 · Fixed in 22.10.0-beta1 CWE-707
Priority LOW 26
A cross-site scripting (XSS) vulnerability in Centreon 22.04.0 allows attackers to execute arbitrary web script or HTML via a crafted payload injected into the Service>Templates service_alias parameter.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00784 · Published 2022-10-06 · No fix listed CWE-79
Priority LOW 26
Centreon v20.10.18 was discovered to contain a cross-site scripting (XSS) vulnerability via the esc_name (Escalation Name) parameter at Configuration/Notifications/Escalations.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.0077 · Published 2022-09-26 · Fixed in 21.04.16, 21.10.8 +1 CWE-79
Priority MEDIUM 43
Centreon v20.10.18 was discovered to contain a SQL injection vulnerability via the esc_name (Escalation Name) parameter at Configuration/Notifications/Escalations.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01393 · Published 2022-09-26 · Fixed in 21.04.16, 21.10.8 +1 CWE-89
Priority LOW 26
Centreon 22.04.0 is vulnerable to Cross Site Scripting (XSS) from the function Pollers > Broker Configuration by adding a crafted payload into the name parameter.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00976 · Published 2022-08-29 · No fix listed CWE-79
Priority LOW 33
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Centreon.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.02232 · Published 2022-08-03 · No fix listed CWE-89
Priority LOW 39
This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.02908 · Published 2022-08-03 · No fix listed CWE-89
Priority MEDIUM 45
/graphStatus/displayServiceStatus.php in Centreon 19.10.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the RRDdatabase_path parameter.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03826 · Published 2021-08-18 · Fixed in 20.04.0 CWE-78
Priority MEDIUM 46
A SQL injection vulnerability in a MediaWiki script in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote unauthenticated attackers to execute arbitrary SQL commands via the host_name and service_description pa…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02115 · Published 2021-08-03 · No fix listed CWE-89
Priority MEDIUM 60
A SQL injection vulnerability in image generation in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-privileged) attackers to execute arbitrary SQL commands via the include/views/graph…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.27437 · Published 2021-08-03 · No fix listed CWE-89
Priority MEDIUM 60
A SQL injection vulnerability in reporting export in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-privileged) attackers to execute arbitrary SQL commands via the include/reporting/d…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.27437 · Published 2021-08-03 · No fix listed CWE-89
Priority MEDIUM 42
An issue was discovered in Centreon-Web in Centreon Platform 20.10.0.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01773 · Published 2021-07-16 · No fix listed CWE-89
Priority LOW 27
An issue was discovered in Centreon-Web in Centreon Platform 20.10.0.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.01074 · Published 2021-07-16 · No fix listed CWE-79
Priority LOW 25
Centreon version 20.10.2 is affected by a cross-site scripting (XSS) vulnerability.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00619 · Published 2021-05-26 · Fixed in 20.10.7 CWE-79
Priority LOW 30
An issue was discovered in Centreon-Web in Centreon Platform 20.10.0.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00823 · Published 2021-04-15 · Fixed in 20.10.7, 20.04.13 +2 CWE-330
Priority MEDIUM 43
Centreon 19.10-3.el7 is affected by a SQL injection vulnerability, where an authorized user is able to inject additional SQL queries to perform remote command execution.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02466 · Published 2021-02-15 · No fix listed CWE-89
Load more
THREATIST.IORead the docs