Centreon vulnerabilities
55 CVEs and advisories name Centreon as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-4649ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs.
- CVE-2025-4648A user with elevated privileges can inject XSS by altering the content of a SVG media during the submit request.
- CVE-2025-4647A user with elevated privileges can bypass sanitization measures by replacing the content of an existing SVG
- CVE-2025-4646A high privilege user is able to create and use a valid admin API token in centreon-web
- CVE-2025-3872Privilege escalation by altering payload in contact form
- CVE-2025-3767SQL Injection in Centreon BAM boolean KPI listing
- CVE-2024-5725Centreon initCurveList SQL Injection Remote Code Execution Vulnerability
- CVE-2024-5723Centreon updateServiceHost SQL Injection Remote Code Execution Vulnerability
- CVE-2023-51633Centreon sysName Cross-Site Scripting Remote Code Execution Vulnerability
- CVE-2024-23119Centreon insertGraphTemplate SQL Injection Remote Code Execution Vulnerability
- CVE-2024-23118Centreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability
- CVE-2024-23117Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability
- CVE-2024-23116Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability
- CVE-2024-23115Centreon updateGroups SQL Injection Remote Code Execution Vulnerability
- CVE-2024-0637Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability
- CVE-2022-42429This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon.
- CVE-2022-42428This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon.
- CVE-2022-42427This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon.
- CVE-2022-42426This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon.
- CVE-2022-42425This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon.
- CVE-2022-42424This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon.
- CVE-2022-41142This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon.
- CVE-2022-34872This vulnerability allows remote attackers to disclose sensitive information on affected installations of Centreon.
- CVE-2022-34871This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon.
- CVE-2012-5967SQL injection vulnerability in menuXML.php in Centreon 2.3.3 through 2.3.9-4 (fixed in Centreon web 2.6.0) allows remote authenticated users