WE
Product
web
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 3Low 0
Watch
Add web to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-6791 | 8.8 | Aug 22 | Second order SQL injection available to user with low privilege Affected: 24.10.0 before 24.10.9; 24.04.0 before 24.04.16; 23.10.0 before 23.10.26 |
| CVE-2025-4650 | 7.2 | Aug 22 | User with high privileges is able to introduce a SQLi using the Meta Service indicator page Affected: 24.10.0 before 24.10.9; 24.04.0 before 24.04.16; 23.10.0 before 23.10.26 |
| CVE-2025-4646 | 7.2 | May 13 | A high privilege user is able to create and use a valid admin API token in centreon-web Affected: 24.04.0 before 24.04.10; 24.10.0 before 24.10.4 |
Showing 3