Centreon Web vulnerabilities

• centreon open tickets on central server, web +1 more Command Injection via CLAPI generatetraps CVE-2026-2750 9.1 CriticalFebruary 27, 2026
• centreon web on central server, web +1 more Blind SQL Injection CVE-2026-2751 8.3 HighFebruary 27, 2026
• centreon web, infra monitoring +1 more A user with elevated privileges can inject XSS in the Hosts configuration parameters page CVE-2025-12513 6.8 MediumJanuary 5, 2026
• centreon infra monitoring, web +1 more Information disclosure on Administration parameters API endpoint CVE-2025-12519 5.3 MediumJanuary 5, 2026
• centreon web, infra monitoring +1 more A user with elevated privileges can inject XSS in the Administration ACL Menus configuration page CVE-2025-13056 6.8 MediumJanuary 5, 2026
• centreon infra monitoring, web +1 more RCE via the backup feature available only to user with high privilege CVE-2025-5965 EPSS 28.2% 7.2 HighJanuary 5, 2026
• centreon web, infra monitoring +1 more A user with elevated privileges can inject XSS in the Hostgroups configuration page CVE-2025-54890 6.8 MediumDecember 22, 2025
• centreon web, infra monitoring +1 more A user with elevated privileges can inject XSS in the Services Meta-services configuration page CVE-2025-10023 6.2 MediumOctober 27, 2025
• centreon web, infra monitoring +1 more A user with low privileges can inject XSS in the Monitoring Recurrent downtimes page CVE-2025-8459 7.7 HighOctober 14, 2025
• centreon web, infra monitoring +1 more A user with elevated privileges can inject XSS in the Commands Connectors configuration configuration page CVE-2025-8430 6.8 MediumOctober 14, 2025
• centreon web, infra monitoring +1 more A user with elevated privileges can inject XSS in the ACL Action access configuration page CVE-2025-8429 6.8 MediumOctober 14, 2025
• centreon web, infra monitoring +1 more A user with elevated privileges can inject XSS in the Hosts templates configuration page CVE-2025-54893 6.8 MediumOctober 14, 2025
• centreon web, infra monitoring +1 more A user with elevated privileges can inject XSS in the ACL Resource Access configuration page CVE-2025-54891 6.8 MediumOctober 14, 2025
• centreon web, infra monitoring +1 more A user with elevated privileges can inject XSS in the SNMP traps group configuration page CVE-2025-54892 6.8 MediumOctober 14, 2025
• centreon web, infra monitoring +1 more A user with elevated privileges can inject XSS in the SNMP traps manufacturer configuration page CVE-2025-54889 6.8 MediumOctober 14, 2025
• centreon infra monitoring, web +1 more RCE via the poller reload feature available only to user with high privilege CVE-2025-5946 Public exploit EPSS 13.5% 7.2 HighOctober 14, 2025
• centreon web, infra monitoring +1 more XSS found in the HTTP loader widget CVE-2025-8428 6.8 MediumOctober 14, 2025
• centreon web Second order SQL injection available to user with low privilege CVE-2025-6791 8.8 HighAugust 22, 2025
• centreon web User with high privileges is able to introduce a SQLi using the Meta Service indicator page CVE-2025-4650 7.2 HighAugust 22, 2025
• centreon web ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs. CVE-2025-4649 4.9 MediumMay 13, 2025
• centreon web A user with elevated privileges can inject XSS by altering the content of a SVG media during the submit request. CVE-2025-4648 8.4 HighMay 13, 2025
• centreon web A user with elevated privileges can bypass sanitization measures by replacing the content of an existing SVG CVE-2025-4647 8.4 HighMay 13, 2025
• centreon web A high privilege user is able to create and use a valid admin API token in centreon-web CVE-2025-4646 7.2 HighMay 13, 2025
• centreon, centreon web +1 more Privilege escalation by altering payload in contact form CVE-2025-3872 7.2 HighApril 24, 2025
• centreon web An issue was discovered in Centreon centreon-web 24.10.x before 24.10.3, 24.04.x before 24.04.9,... CVE-2024-55573 9.1 CriticalJanuary 23, 2025
• centreon web An issue was discovered in Centreon Web 24.10.x before 24.10.3, 24.04.x before 24.04.9, 23.10.x... CVE-2024-53923 9.1 CriticalJanuary 23, 2025
• centreon web A SQL Injection vulnerability exists in the service configuration functionality in Centreon Web... CVE-2024-39841 8.8 HighAugust 23, 2024
• centreon web A SQL Injection vulnerability exists in the Graph Template component in Centreon Web 24.04.x... CVE-2024-33854 9.1 CriticalAugust 23, 2024
• centreon web A SQL Injection vulnerability exists in the Timeperiod component in Centreon Web 24.04.x before... CVE-2024-33853 9.1 CriticalAugust 23, 2024
• centreon web A SQL Injection vulnerability exists in the Downtime component in Centreon Web 24.04.x before 24... CVE-2024-33852 9.1 CriticalAugust 23, 2024
• centreon, centreon web +1 more A SQL Injection vulnerability exists in the updateServiceHost functionality in Centreon Web 24.04... CVE-2024-32501 EPSS 19.2% 9.8 CriticalAugust 23, 2024
• centreon, centreon web +1 more Centreon initCurveList SQL Injection Remote Code Execution Vulnerability CVE-2024-5725 EPSS 47.4% 8.8 HighAugust 21, 2024
• centreon, centreon web +1 more Centreon updateServiceHost SQL Injection Remote Code Execution Vulnerability CVE-2024-5723 EPSS 40.7% 8.8 HighAugust 21, 2024
• centreon, centreon web +1 more Centreon sysName Cross-Site Scripting Remote Code Execution Vulnerability CVE-2023-51633 7.5 HighMay 3, 2024
• centreon, centreon web +1 more Centreon insertGraphTemplate SQL Injection Remote Code Execution Vulnerability CVE-2024-23119 Fix available 8.8 HighApril 1, 2024
• centreon, centreon web +1 more Centreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability CVE-2024-23118 Fix available EPSS 53.4% 7.2 HighApril 1, 2024
• centreon, centreon web +1 more Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability CVE-2024-23117 Fix available EPSS 53.4% 7.2 HighApril 1, 2024
• centreon, centreon web +1 more Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability CVE-2024-23116 Fix available EPSS 53.4% 7.2 HighApril 1, 2024
• centreon, centreon web +1 more Centreon updateGroups SQL Injection Remote Code Execution Vulnerability CVE-2024-23115 Fix available EPSS 67.5% 7.2 HighApril 1, 2024
• centreon, centreon web +1 more Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability CVE-2024-0637 Fix available EPSS 72.3% 8.8 HighApril 1, 2024
• centreon web Insecure Permissions in Centreon Web versions 19.10.18, 20.04.8, and 20.10.2 allows remote... CVE-2021-26804 6.5 MediumMay 4, 2021
• centreon web An issue was discovered in Centreon Web through 19.04.3. When a user changes his password on his... CVE-2019-15299 8.8 HighFebruary 24, 2020
• centreon web A problem was found in Centreon Web through 19.04.3. An authenticated command injection is... CVE-2019-15298 EPSS 26.6% 8.8 HighNovember 27, 2019
• centreon web A problem was found in Centreon Web through 19.04.3. An authenticated SQL injection is present in... CVE-2019-15300 8.8 HighNovember 27, 2019
• centreon web Centreon Web 19.04.4 has weak permissions within the OVA (aka VMware virtual machine) and OVF ... CVE-2019-16406 7.8 HighNovember 21, 2019
• centreon web Improper Input Validation in Centreon Web CVE-2019-16405 Public exploitFix available EPSS 27.0% 7.2 HighNovember 21, 2019
• centreon web The token generator in index.php in Centreon Web before 2.8.27 is predictable. CVE-2019-17105 5.3 MediumOctober 8, 2019
• centreon web Local file inclusion in brokerPerformance.php in Centreon Web before 2.8.28 allows attackers to... CVE-2019-17108 6.1 MediumOctober 8, 2019
• centreon web minPlayCommand.php in Centreon Web before 2.8.27 allows authenticated attackers to execute... CVE-2019-17107 8.8 HighOctober 8, 2019
• centreon web Centreon Sensitive Data Exposure CVE-2019-17106 Fix available 6.5 MediumOctober 8, 2019
• Show olderLoading…