Login Request a demo
WE
Product
web
by Centreon · last CVE Feb 27, 2026
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 1High 3Medium 3Low 0
Severity
All severities7Critical1High3Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add web to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-4648
5.9
0%
May 13
A user with elevated privileges can inject XSS by altering the content of a SVG media during the submit request.
Affected: 24.10.0 before 24.10.5; 24.04.0 before 24.04.11; 23.10.0 before 23.10.22; 23.04.0 before 23.04.27; 22.10.0 before 22.10.29
CVE-2025-4649
4.9
0%
May 13
ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs.
Affected: 24.10.3 before 24.10.4; 24.04.09 before 24.04.10; 23.10.19 before 23.10.21; 23.04.24 before 23.04.26
CVE-2025-4647
4.8
0%
May 13
A user with elevated privileges can bypass sanitization measures by replacing the content of an existing SVG
Affected: 24.10.0 before 24.10.5; 24.04.0 before 24.04.11; 23.10.0 before 23.10.22; 23.04.0 before 23.04.27; 22.10.0 before 22.10.29
Showing 3