Centreon
Centreon: vulnerabilidades y CVE
Centreon tiene 59 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 8 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE59
Últimos 12 meses0
Críticas8
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2024-39843 | Media (6.7) | 2.1% | — | 23 sept 2024 | A SQL injection vulnerability in Centreon 24.04.2 allows a remote high-privileged attacker to execute arbitrary SQL command via create user form inputs. |
| CVE-2024-39842 | Alta (7.2) | 1.8% | — | 23 sept 2024 | A SQL injection vulnerability in Centreon 24.04.2 allows a remote high-privileged attacker to execute arbitrary SQL command via user massive changes inputs. |
| CVE-2022-42429 | Alta (8.8) | 76% | — | 29 mar 2023 | This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of requests… |
| CVE-2022-42428 | Alta (8.8) | 2.9% | — | 29 mar 2023 | This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of requests… |
| CVE-2022-42427 | Alta (8.8) | 76% | — | 29 mar 2023 | This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the contact groups… |
| CVE-2022-42426 | Alta (8.8) | 2.9% | — | 29 mar 2023 | This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of requests… |
| CVE-2022-42425 | Alta (8.8) | 76% | — | 29 mar 2023 | This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of requests… |
| CVE-2022-42424 | Alta (8.8) | 76% | — | 29 mar 2023 | This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of requests… |
| CVE-2022-41142 | Alta (8.8) | 85% | — | 26 ene 2023 | This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of requests… |
| CVE-2022-3827 | Crítica (9.8) | 0.83% | — | 2 nov 2022 | A vulnerability was found in centreon. It has been declared as critical. This vulnerability affects unknown code of the file formContactGroup.php of the component Contact Groups Form. The manipulation of the argument… |
| CVE-2022-39988 | Media (5.4) | 0.69% | — | 6 oct 2022 | A cross-site scripting (XSS) vulnerability in Centreon 22.04.0 allows attackers to execute arbitrary web script or HTML via a crafted payload injected into the Service>Templates service_alias parameter. |
| CVE-2022-40044 | Media (5.4) | 0.75% | — | 26 sept 2022 | Centreon v20.10.18 was discovered to contain a cross-site scripting (XSS) vulnerability via the esc_name (Escalation Name) parameter at Configuration/Notifications/Escalations. This vulnerability allows attackers to… |
| CVE-2022-40043 | Alta (8.8) | 1.4% | — | 26 sept 2022 | Centreon v20.10.18 was discovered to contain a SQL injection vulnerability via the esc_name (Escalation Name) parameter at Configuration/Notifications/Escalations. |
| CVE-2022-36194 | Media (5.4) | 0.95% | — | 29 ago 2022 | Centreon 22.04.0 is vulnerable to Cross Site Scripting (XSS) from the function Pollers > Broker Configuration by adding a crafted payload into the name parameter. |
| CVE-2022-34872 | Media (6.5) | 2.2% | — | 3 ago 2022 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the… |
| CVE-2022-34871 | Alta (7.2) | 2.8% | — | 3 ago 2022 | This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the configuration of… |
| CVE-2020-22345 | Alta (8.8) | 3.8% | — | 18 ago 2021 | /graphStatus/displayServiceStatus.php in Centreon 19.10.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the RRDdatabase_path parameter. |
| CVE-2021-37558 | Crítica (9.8) | 2.1% | — | 3 ago 2021 | A SQL injection vulnerability in a MediaWiki script in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote unauthenticated attackers to execute arbitrary SQL commands via the host_name and service_description… |
| CVE-2021-37557 | Alta (8.8) | 27% | — | 3 ago 2021 | A SQL injection vulnerability in image generation in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-privileged) attackers to execute arbitrary SQL commands via the… |
| CVE-2021-37556 | Alta (8.8) | 27% | — | 3 ago 2021 | A SQL injection vulnerability in reporting export in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-privileged) attackers to execute arbitrary SQL commands via the… |
| CVE-2021-28053 | Alta (8.8) | 1.8% | — | 16 jul 2021 | An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A SQL injection vulnerability in "Configuration > Users > Contacts / Users" allows remote authenticated users to execute arbitrary SQL commands via… |
| CVE-2021-28054 | Media (5.4) | 1.1% | — | 16 jul 2021 | An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A Stored Cross-Site Scripting (XSS) issue in "Configuration > Hosts" allows remote authenticated users to inject arbitrary web script or HTML via the… |
| CVE-2021-27676 | Media (5.4) | 0.62% | — | 26 may 2021 | Centreon version 20.10.2 is affected by a cross-site scripting (XSS) vulnerability. The dep_description (Dependency Description) and dep_name (Dependency Name) parameters are vulnerable to stored XSS. A user has to log… |
| CVE-2021-28055 | Media (6.5) | 0.82% | — | 15 abr 2021 | An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. The anti-CSRF token generation is predictable, which might allow CSRF attacks that add an admin user. |
| CVE-2020-22425 | Alta (8.8) | 2.5% | — | 15 feb 2021 | Centreon 19.10-3.el7 is affected by a SQL injection vulnerability, where an authorized user is able to inject additional SQL queries to perform remote command execution. |
| CVE-2020-10945 | Media (4.3) | 0.65% | — | 27 may 2020 | Centreon before 19.10.7 exposes Session IDs in server responses. |
| CVE-2020-13252 | Alta (8.8) | 5.4% | — | 21 may 2020 | Centreon before 19.04.15 allows remote attackers to execute arbitrary OS commands by placing shell metacharacters in RRDdatabase_status_path (via a main.get.php request) and then visiting the… |
| CVE-2019-19699 | Alta (7.2) | 28% | — | 6 abr 2020 | There is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers misconfiguration, leading to system compromise via apache crontab misconfiguration, This allows the… |
| CVE-2019-19487 | Alta (8.8) | 5.3% | — | 20 mar 2020 | Command Injection in minPlayCommand.php in Centreon (19.04.4 and below) allows an attacker to achieve command injection via a plugin test. |
| CVE-2019-19486 | Media (6.5) | 1.7% | — | 20 mar 2020 | Local File Inclusion in minPlayCommand.php in Centreon (19.04.4 and below) allows an attacker to traverse paths via a plugin test. |