Priority LOW 33
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Monitoring recurrent downtime scheduler modules) allows Stored XSS.This issue affect…
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.00252 · Published 2025-10-14 · Fixed in 24.10.13, 24.04.18 +1 CWE-79
Priority LOW 29
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Commands Connectors configuration modules) allows Stored XSS by users with elevated…
CVSS 3.1MEDIUM 6.8· Network · High privileges · No interaction · EPSS 0.00209 · Published 2025-10-14 · Fixed in 24.10.13, 24.04.18 +1 CWE-79
Priority LOW 29
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (ACL Action access configuration modules) allows Stored XSS by users with elevated pr…
CVSS 3.1MEDIUM 6.8· Network · High privileges · No interaction · EPSS 0.00209 · Published 2025-10-14 · Fixed in 24.10.13, 24.04.18 +1 CWE-79
Priority LOW 29
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Hosts templates configuration modules) allows Stored XSS by users with elevated priv…
CVSS 3.1MEDIUM 6.8· Network · High privileges · No interaction · EPSS 0.00209 · Published 2025-10-14 · Fixed in 24.10.13, 24.04.18 +1 CWE-79
Priority LOW 30
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (ACL Resource access configuration modules) allows Stored XSS by users with elevated…
CVSS 3.1MEDIUM 6.8· Network · High privileges · No interaction · EPSS 0.00258 · Published 2025-10-14 · Fixed in 24.10.13, 24.04.18 +1 CWE-79
Priority LOW 30
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (SNMP traps group configuration modules) allows Stored XSS by users with elevated pri…
CVSS 3.1MEDIUM 6.8· Network · High privileges · No interaction · EPSS 0.00258 · Published 2025-10-14 · Fixed in 24.10.13, 24.04.18 +1 CWE-79
Priority LOW 30
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (SNMP traps manufacturer configuration modules) allows Stored XSS by users with eleva…
CVSS 3.1MEDIUM 6.8· Network · High privileges · No interaction · EPSS 0.00258 · Published 2025-10-14 · Fixed in 24.10.13, 24.04.18 +1 CWE-79
Priority MEDIUM 54
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Centreon Infra Monitoring (Poller reload setup in the configuration modules) allows OS Command Injection.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.13508 · Published 2025-10-14 · Fixed in 24.10.13, 24.04.18 +1 CWE-78
Priority LOW 30
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (HTTP Loader widget modules) allows Stored XSS.This issue affects Infra Monitoring: f…
CVSS 3.1MEDIUM 6.8· Network · Low privileges · User interaction · EPSS 0.00252 · Published 2025-10-14 · Fixed in 24.10.13, 24.04.18 +1 CWE-79