CE
Product
Centreon
76
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 10High 42Medium 18Low 0
Watch
Add Centreon to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-5725 | 8.8 | Aug 21 | Centreon initCurveList SQL Injection Remote Code Execution Vulnerability Affected: 23.10.3 |
| CVE-2024-5723 | 8.8 | Aug 21 | Centreon updateServiceHost SQL Injection Remote Code Execution Vulnerability Affected: 23.10.8 |
| CVE-2024-23119 | 8.8 | Apr 1 | Centreon insertGraphTemplate SQL Injection Remote Code Execution Vulnerability Affected: 23.10.0 |
| CVE-2024-0637 | 8.8 | Apr 1 | Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability Affected: 23.10.0 |
| CVE-2022-42426 | 8.8 | Mar 29 | This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon Affected: 22.04 |
| CVE-2022-42429 | 8.8 | Mar 29 | This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon Affected: 22.04 |
| CVE-2022-42428 | 8.8 | Mar 29 | This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon Affected: 22.04 |
| CVE-2022-42427 | 8.8 | Mar 29 | This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon Affected: 22.04 |
| CVE-2022-42425 | 8.8 | Mar 29 | This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon Affected: 22.04 |
| CVE-2022-42424 | 8.8 | Mar 29 | This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon Affected: 22.04 |
| CVE-2022-41142 | 8.8 | Jan 26 | This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon Affected: 22.04.2 |
| CVE-2022-40043 | 8.8 | Sep 26 | Centreon v20.10.18 was discovered to contain a SQL injection vulnerability via the esc_name (Escalation Name) parameter at Configuration/Notifications/Escalations Affected: 20.10.18 |
| CVE-2020-22345 | 8.8 | Aug 18 | /graphStatus/displayServiceStatus.php in Centreon 19.10.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the RRDdatabase_path parameter Affected: 19.10.8 |
| CVE-2021-37557 | 8.8 | Aug 3 | A SQL injection vulnerability in image generation in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-privileged) attackers to execute arbitrary… Affected: before 20.04.14; 20.10.0 before 20.10.8; 21.04.0 before 21.04.2 |
| CVE-2021-37556 | 8.8 | Aug 3 | A SQL injection vulnerability in reporting export in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-privileged) attackers to execute arbitrary… Affected: before 20.04.14; 20.10.0 before 20.10.8; 21.04.0 before 21.04.2 |
| CVE-2021-28053 | 8.8 | Jul 16 | An issue was discovered in Centreon-Web in Centreon Platform 20.10.0 Affected: 20.10.0 |
| CVE-2020-22425 | 8.8 | Feb 15 | Centreon 19.10-3.el7 is affected by a SQL injection vulnerability, where an authorized user is able to inject additional SQL queries to perform remote command execution Affected: 19.10 |
| CVE-2020-13252 | 8.8 | May 21 | Centreon before 19.04.15 allows remote attackers to execute arbitrary OS commands by placing shell metacharacters in RRDdatabase_status_path (via a main.get.php request) and then… Affected: 19.04.0 before 19.04.15 |
| CVE-2019-19487 | 8.8 | Mar 20 | Command Injection in minPlayCommand.php in Centreon (19.04.4 and below) allows an attacker to achieve command injection via a plugin test Affected: through 19.04.4 |
| CVE-2019-17642 | 8.8 | Mar 5 | An issue was discovered in Centreon before 18.10.8, 19.10.1, and 19.04.2 Affected: 18.0.0 before 18.10.8; 19.04.0 before 19.04.2; 19.10.0 before 19.10.1 |
| CVE-2020-9463 | 8.8 | Feb 28 | Centreon 19.10 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the server_ip field in JSON data in an… Affected: 19.10 |
| CVE-2019-17501 | 8.8 | Oct 14 | Centreon 19.04 allows attackers to execute arbitrary OS commands via the Command Line field of main.php?p=60807&type=4 (aka the Configuration > Commands > Discovery screen) Affected: 19.04.0 |
| CVE-2019-13024 | 8.8 | Jul 1 | Centreon 18.x before 18.10.6, 19.x before 19.04.3, and Centreon web before 2.8.29 allows the attacker to execute arbitrary system commands by using the value… Affected: 19.04.0 |
| CVE-2018-19312 | 8.8 | Nov 16 | Centreon 3.4.x (fixed in Centreon 18.10.0 and Centreon web 2.8.24) allows SQL Injection via the searchVM parameter to the main.php?p=20408 URI Affected: 3.4.0 through 3.4.9 |
| CVE-2018-19271 | 8.8 | Nov 14 | Centreon 3.4.x (fixed in Centreon 18.10.0 and Centreon web 2.8.28) allows SQL Injection via the main.php searchH parameter Affected: 3.4.1; 3.4.6 |
| CVE-2019-20327 | 7.8 | Jan 16 | Insecure permissions in cwrapper_perl in Centreon Infrastructure Monitoring Software through 19.10 allow local attackers to gain privileges Affected: through 19.10 |
| CVE-2019-17646 | 7.5 | Mar 5 | An issue was discovered in Centreon before 18.10.8, 19.04.5, and 19.10.2 Affected: 18.0.0 before 18.10.8; 19.04.0 before 19.04.5; 19.10.0 before 19.10.2 |
| CVE-2019-17645 | 7.5 | Mar 5 | An issue was discovered in Centreon before 2.8.31, 18.10.9, 19.04.6, and 19.10.3 Affected: before 2.8.31; 18.0.0 before 18.10.9; 19.04.0 before 19.04.6; 19.10.0 before 19.10.3 |
| CVE-2019-17644 | 7.5 | Mar 4 | An issue was discovered in Centreon before 2.8-30, 18.10-8, 19.04-5, and 19.10-2 Affected: before 2.8.30; 2.8.4 before 18.10.8; 19.0.0 before 19.04.5; 19.04.6 before 19.10.2 |
| CVE-2019-17643 | 7.5 | Mar 4 | An issue was discovered in Centreon before 2.8-30,18.10-8, 19.04-5, and 19.10-2 Affected: before 2.8.30; 2.8.4 before 18.10.8; 19.0.0 before 19.04.5; 19.04.6 before 19.10.2 |
| CVE-2026-11587 New | 7.2 | Oct 29 | Authenticated SQL Injection via PHP Array Key in ACL Management (Resources & Actions) — Centreon 26.03.0 Affected: 25.10 before centreon-web-25.10.15; 24.10 before centreon-web-24.10.28 |
| CVE-2025-3872 | 7.2 | Apr 24 | Privilege escalation by altering payload in contact form Affected: 22.10.0 before 22.10.28; 23.04.0 before 23.04.25; 23.10.0 before 23.10.20; 24.04.0 before 24.04.10; 24.10.0 before 24.10.4 |
| CVE-2024-45756 | 7.2 | Nov 25 | An issue was discovered in Centreon centreon-open-tickets 24.10.x before 24.10.0, 24.04.x before 24.04.2, 23.10.x before 23.10.1, 23.04.x before 23.04.3, and 22.10.x before… Affected: 24.04.0 before 24.04.2; 23.10.0 before 23.10.1; 23.04.0 before 23.04.3; 22.10.0 before 22.10.2; 24.10 before 24.10.0 |
| CVE-2024-45755 | 7.2 | Nov 25 | An issue was discovered in Centreon centreon-dsm-server 24.10.x before 24.10.0, 24.04.x before 24.04.3, 23.10.x before 23.10.1, 23.04.x before 23.04.3, and 22.10.x before 22.10.2 Affected: 24.04.0 before 24.04.2; 23.10.0 before 23.10.1; 23.04.0 before 23.04.3; 22.10.0 before 22.10.2; 24.10 before 24.10.0 |
| CVE-2024-45754 | 7.2 | Oct 11 | An issue was discovered in the centreon-bi-server component in Centreon BI Server 24.04.x before 24.04.3, 23.10.x before 23.10.8, 23.04.x before 23.04.11, and 22.10.x before… Affected: 22.10.0 before 22.10.11; 23.10.0 before 23.10.8; 24.04.0 before 24.04.3; 23.04.0 before 23.04.11 |
| CVE-2024-39842 | 7.2 | Sep 23 | A SQL injection vulnerability in Centreon 24.04.2 allows a remote high-privileged attacker to execute arbitrary SQL command via user massive changes inputs Affected: 24.04.2 |
| CVE-2024-23118 | 7.2 | Apr 1 | Centreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability Affected: 23.10.0 |
| CVE-2024-23117 | 7.2 | Apr 1 | Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability Affected: 23.10.0 |
| CVE-2024-23116 | 7.2 | Apr 1 | Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability Affected: 23.10.0 |
| CVE-2024-23115 | 7.2 | Apr 1 | Centreon updateGroups SQL Injection Remote Code Execution Vulnerability Affected: 23.10.0 |
| CVE-2022-34871 | 7.2 | Aug 3 | This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon Affected: 21.10-2 |
| CVE-2019-19699 | 7.2 | Apr 6 | There is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers misconfiguration, leading to system compromise via apache… Affected: through 19.10 |
Showing 42