Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Centreon Infra Monitoring 24.04.19, 24.10.15, 25.10.2 Clear all filters
TI-2025-11484 CVE-2025-12513 · GHSA-6cq2-43jx-jjqp

A user with elevated privileges can inject XSS in the Hosts configuration parameters page

Priority LOW 29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Hosts configuration form modules) allows Stored XSS to users with high privileges.

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.00195 Published 2026-01-05 Fixed in 25.10.2, 24.10.15 +1 CWE-79
TI-2025-11490 CVE-2025-12519 · GHSA-m5h4-58hj-mjp9

Information disclosure on Administration parameters API endpoint

Priority LOW 30

Missing Authorization vulnerability in Centreon Infra Monitoring (Administration parameters API endpoint modules) allows Accessing Functionality Not Properly Constrained by ACLs, resulting in Information Disclosure like…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00231 Published 2026-01-05 Fixed in 25.10.2, 24.10.15 +1 CWE-862
TI-2025-11941 CVE-2025-13056 · GHSA-85gx-xr6w-3xw9

A user with elevated privileges can inject XSS in the Administration ACL Menus configuration page

Priority LOW 29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Administration ACL menu configuration modules) allows Stored XSS to users with high…

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.00195 Published 2026-01-05 Fixed in 25.10.2, 24.10.15 +1 CWE-79