centreon Vulnerability Advisory Catalog

Total 124 security vulnerabilities recorded for centreon software and firmware.

← Back to All Vendors
Component: centreon

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vu...

📅 2023-03-29
CVSS 8.8 Dossier →
Component: centreon

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vu...

📅 2023-03-29
CVSS 8.8 Dossier →
Component: centreon

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vu...

📅 2023-03-29
CVSS 8.8 Dossier →
Component: centreon

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vu...

📅 2023-03-29
CVSS 8.8 Dossier →
Component: centreon

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vu...

📅 2023-03-29
CVSS 8.8 Dossier →
Component: centreon

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vu...

📅 2023-03-29
CVSS 8.8 Dossier →
Component: centreon

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vu...

📅 2023-01-26
CVSS 8.8 Dossier →
CVE-2022-3827 MEDIUM
Component: centreon

A vulnerability was found in centreon. It has been declared as critical. This vulnerability affects unknown code of the file formContactGroup.php of t...

📅 2022-11-02
CVSS 6.3 Dossier →
Component: centreon

A cross-site scripting (XSS) vulnerability in Centreon 22.04.0 allows attackers to execute arbitrary web script or HTML via a crafted payload injected...

📅 2022-10-06
CVSS 5.4 Dossier →
Component: centreon

Centreon v20.10.18 was discovered to contain a cross-site scripting (XSS) vulnerability via the esc_name (Escalation Name) parameter at Configuration/...

📅 2022-09-26
CVSS 5.4 Dossier →
Component: centreon

Centreon v20.10.18 was discovered to contain a SQL injection vulnerability via the esc_name (Escalation Name) parameter at Configuration/Notifications...

📅 2022-09-26
CVSS 8.8 Dossier →
Component: centreon

Centreon 22.04.0 is vulnerable to Cross Site Scripting (XSS) from the function Pollers > Broker Configuration by adding a crafted payload into the nam...

📅 2022-08-29
CVSS 5.4 Dossier →
Component: centreon

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Centreon. Authentication is required to expl...

📅 2022-08-03
CVSS 6.5 Dossier →
Component: centreon

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vu...

📅 2022-08-03
CVSS 7.2 Dossier →
Component: centreon

/graphStatus/displayServiceStatus.php in Centreon 19.10.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the RRD...

📅 2021-08-18
CVSS 8.8 Dossier →
CVE-2021-37558 CRITICAL
Component: centreon

A SQL injection vulnerability in a MediaWiki script in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote unauthenticated attackers to execu...

📅 2021-08-03
CVSS 9.8 Dossier →
Component: centreon

A SQL injection vulnerability in image generation in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-privileged) a...

📅 2021-08-03
CVSS 8.8 Dossier →
Component: centreon

A SQL injection vulnerability in reporting export in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-privileged) a...

📅 2021-08-03
CVSS 8.8 Dossier →
Component: centreon

An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A SQL injection vulnerability in "Configuration > Users > Contacts / Users" allo...

📅 2021-07-16
CVSS 8.8 Dossier →
Component: centreon

An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A Stored Cross-Site Scripting (XSS) issue in "Configuration > Hosts" allows remo...

📅 2021-07-16
CVSS 5.4 Dossier →
Component: centreon

Centreon version 20.10.2 is affected by a cross-site scripting (XSS) vulnerability. The dep_description (Dependency Description) and dep_name (Depende...

📅 2021-05-26
CVSS 5.4 Dossier →
Component: centreon_web

Insecure Permissions in Centreon Web versions 19.10.18, 20.04.8, and 20.10.2 allows remote attackers to bypass validation by changing any file extensi...

📅 2021-05-04
CVSS 6.5 Dossier →
Component: centreon

An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. The anti-CSRF token generation is predictable, which might allow CSRF attacks th...

📅 2021-04-15
CVSS 6.5 Dossier →
Component: centreon

Centreon 19.10-3.el7 is affected by a SQL injection vulnerability, where an authorized user is able to inject additional SQL queries to perform remote...

📅 2021-02-15
CVSS 8.8 Dossier →
Page 3 of 6 (124 Total Records)