Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Priority LOW 33

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Monitoring recurrent downtime scheduler modules) allows Stored XSS.This issue affect…

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00252 Published 2025-10-14 Fixed in 24.10.13, 24.04.18 +1 CWE-79
Priority LOW 29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Commands Connectors configuration modules) allows Stored XSS by users with elevated…

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.00209 Published 2025-10-14 Fixed in 24.10.13, 24.04.18 +1 CWE-79
Priority LOW 29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (ACL Action access configuration modules) allows Stored XSS by users with elevated pr…

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.00209 Published 2025-10-14 Fixed in 24.10.13, 24.04.18 +1 CWE-79
Priority LOW 29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Hosts templates configuration modules) allows Stored XSS by users with elevated priv…

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.00209 Published 2025-10-14 Fixed in 24.10.13, 24.04.18 +1 CWE-79
Priority LOW 30

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (ACL Resource access configuration modules) allows Stored XSS by users with elevated…

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.00258 Published 2025-10-14 Fixed in 24.10.13, 24.04.18 +1 CWE-79
Priority LOW 30

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (SNMP traps group configuration modules) allows Stored XSS by users with elevated pri…

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.00258 Published 2025-10-14 Fixed in 24.10.13, 24.04.18 +1 CWE-79
Priority LOW 30

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (SNMP traps manufacturer configuration modules) allows Stored XSS by users with eleva…

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.00258 Published 2025-10-14 Fixed in 24.10.13, 24.04.18 +1 CWE-79
Priority MEDIUM 54

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Centreon Infra Monitoring (Poller reload setup in the configuration modules) allows OS Command Injection.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.13508 Published 2025-10-14 Fixed in 24.10.13, 24.04.18 +1 CWE-78
TI-2025-07714 CVE-2025-8428 · GHSA-mw2j-cm2r-g4x9

XSS found in the HTTP loader widget

Priority LOW 30

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (HTTP Loader widget modules) allows Stored XSS.This issue affects Infra Monitoring: f…

CVSS 3.1MEDIUM 6.8 Network Low privileges User interaction EPSS 0.00252 Published 2025-10-14 Fixed in 24.10.13, 24.04.18 +1 CWE-79