Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Centreon Component: Open Tickets Clear all filters
TI-2026-02354 CVE-2026-2749 · GHSA-p9c8-78v7-93hh

Path traversal in Centreon Open Tickets

Priority MEDIUM 44

Vulnerability in Centreon Centreon Open Tickets on Central Server on Linux (Centroen Open Ticket modules).This issue affects Centreon Open Tickets on Central Server: from all before 25.10.3, 24.10.8, 24.04.7.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00631 Published 2026-02-27 Fixed in 25.10.3, 24.10.8 +1 CWE-22
TI-2025-11485 CVE-2025-12514 · GHSA-fwr9-mwqr-4wq5

SQL injection in Centreon Infra Monitoring - Open-tickets

Priority LOW 33

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon Infra Monitoring - Open-tickets (Notification rules configuration parameters, Open tickets modules) allows SQ…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00314 Published 2025-12-22 Fixed in 24.10.5, 24.04.5 +1 CWE-89
TI-2025-07743 CVE-2025-8460 · GHSA-rh9w-725c-v2x8

A user with elevated privileges can inject XSS in the Notification rules configuration page

Priority LOW 30

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Notification rules, Open tickets module) allows Stored XSS by users with elevated pr…

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.00241 Published 2025-12-22 Fixed in 24.10.5, 24.04.5 +1 CWE-79