Vulnerabilities

TI-2014-03109 CVE-2014-3829 · GHSA-r4f4-p3xm-cmmg

displayServiceStatus.php in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in…

HIGH 83

displayServiceStatus.php in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) session_id or (2) temp…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.80243 Published 2014-10-23 No fix listed CWE-94

TI-2014-03108 CVE-2014-3828 · GHSA-rpfp-gv2p-xqp5

Multiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server…

HIGH 81

Multiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allow remote attackers to execute arbitrary SQL commands via (1) the index_id parameter to views/g…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.72712 Published 2014-10-23 No fix listed CWE-89

Vulnerabilities

Filters

displayServiceStatus.php in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in…

Multiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server…