Latest centreon centreon Vulnerabilities

● CVE-2023-51633

Centreon sysName Cross-Site Scripting Remote Code Execution Vulnerability

Centreon Centreon

Centreon sysName Cross-Site Scripting Remote Code Execution Vulnerability

Centreon Centreon

● CVE-2024-23119

Centreon insertGraphTemplate SQL Injection Remote Code Execution Vulnerability

composer/centreon/centreon<22.10.15

● CVE-2024-23118

Centreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability

composer/centreon/centreon<22.10.15

● CVE-2024-23117

Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability

composer/centreon/centreon<22.10.15

● CVE-2024-23116

Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability

composer/centreon/centreon<22.10.15

● CVE-2024-23115

Centreon updateGroups SQL Injection Remote Code Execution Vulnerability

composer/centreon/centreon<22.10.15

● CVE-2024-0637

Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability

composer/centreon/centreon<22.10.15

Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability

Centreon Centreon

Centreon updateGroups SQL Injection Remote Code Execution Vulnerability

Centreon Centreon

Centreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability

Centreon Centreon

Centreon insertGraphTemplate SQL Injection Remote Code Execution Vulnerability

Centreon Centreon

Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability

Centreon Centreon

Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability

Centreon Centreon

● CVE-2022-42429

Centreon Poller Broker SQL Injection Privilege Escalation Vulnerability

Centreon Centreon<21.04.19

Centreon Centreon>=21.10.0<21.10.11

Centreon Centreon>=22.04.0<22.04.6

Centreon Centreon

● CVE-2022-42426

Centreon Poller Broker SQL Injection Privilege Escalation Vulnerability

Centreon Centreon<21.04.19

Centreon Centreon>=21.10.0<21.10.11

Centreon Centreon>=22.04.0<22.04.6

Centreon Centreon

● CVE-2022-42425

Centreon Poller Broker SQL Injection Privilege Escalation Vulnerability

Centreon Centreon<21.04.19

Centreon Centreon>=21.10.0<21.10.11

Centreon Centreon>=22.04.0<22.04.6

Centreon Centreon

● CVE-2022-42428

Centreon Poller Broker SQL Injection Privilege Escalation Vulnerability

Centreon Centreon<21.04.19

Centreon Centreon>=21.10.0<21.10.11

Centreon Centreon>=22.04.0<22.04.6

Centreon Centreon

● CVE-2022-42424

Centreon Poller Broker SQL Injection Privilege Escalation Vulnerability

Centreon Centreon<21.04.19

Centreon Centreon>=21.10.0<21.10.11

Centreon Centreon>=22.04.0<22.04.6

Centreon Centreon

● CVE-2022-41142

Centreon Poller Resource SQL Injection Privilege Escalation Vulnerability

Centreon Centreon=22.04.2

Centreon Centreon

● CVE-2022-3827

A vulnerability was found in centreon. It has been declared as critical. This vulnerability affects unknown code of the file formContactGroup.php of the component Contact Groups Form. The manipulation...

Centreon Centreon<22.10.0

● CVE-2022-39988

A cross-site scripting (XSS) vulnerability in Centreon 22.04.0 allows attackers to execute arbitrary web script or HTML via a crafted payload injected into the Service>Templates service_alias paramete...

Centreon Centreon=22.04.0

● CVE-2022-40044

Centreon v20.10.18 was discovered to contain a cross-site scripting (XSS) vulnerability via the esc_name (Escalation Name) parameter at Configuration/Notifications/Escalations. This vulnerability allo...

Centreon Centreon=20.10.18

● CVE-2022-40043

Centreon v20.10.18 was discovered to contain a SQL injection vulnerability via the esc_name (Escalation Name) parameter at Configuration/Notifications/Escalations.

Centreon Centreon=20.10.18

● CVE-2022-36194

Centreon 22.04.0 is vulnerable to Cross Site Scripting (XSS) from the function Pollers > Broker Configuration by adding a crafted payload into the name parameter.

Centreon Centreon=22.04.0

● CVE-2022-34871

Centreon Poller Resource SQL Injection Privilege Escalation Vulnerability

Centreon Centreon=21.10.2

Centreon Centreon

● CVE-2022-34872

Centreon Virtual Metrics SQL Injection Information Disclosure Vulnerability

Centreon Centreon=21.10.2

Centreon Centreon

● CVE-2020-22345

/graphStatus/displayServiceStatus.php in Centreon 19.10.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the RRDdatabase_path parameter.

Centreon Centreon=19.10.8

● CVE-2021-37557

A SQL injection vulnerability in image generation in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-privileged) attackers to execute arbitrary SQL commands via the...

Centreon Centreon<20.04.14

Centreon Centreon>=20.10.0<20.10.8

Centreon Centreon>=21.04.0<21.04.2

● CVE-2021-37556

A SQL injection vulnerability in reporting export in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-privileged) attackers to execute arbitrary SQL commands via the...

Centreon Centreon<20.04.14

Centreon Centreon>=20.10.0<20.10.8

Centreon Centreon>=21.04.0<21.04.2

● CVE-2021-28053

An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A SQL injection vulnerability in "Configuration > Users > Contacts / Users" allows remote authenticated users to execute arbitrary...

Centreon Centreon=20.10.0

● CVE-2021-28054

An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A Stored Cross-Site Scripting (XSS) issue in "Configuration > Hosts" allows remote authenticated users to inject arbitrary web scr...

Centreon Centreon=20.10.0

● CVE-2021-27676

Centreon Centreon=20.10.2

● CVE-2020-22425

Centreon 19.10-3.el7 is affected by a SQL injection vulnerability, where an authorized user is able to inject additional SQL queries to perform remote command execution.

Centreon Centreon=19.10

● CVE-2020-10945

Centreon before 19.10.7 exposes Session IDs in server responses.

composer/centreon/centreon<2.8.32

composer/centreon/centreon>=18.0.0<18.10.11

composer/centreon/centreon>=19.0.0<19.04.10

composer/centreon/centreon>=19.10.0<19.10.7

Centreon Centreon<=2.8.2

Centreon Centreon>=18.10.0<18.10.11

and 6 more

● CVE-2020-13252

Centreon before 19.04.15 allows remote attackers to execute arbitrary OS commands by placing shell metacharacters in RRDdatabase_status_path (via a main.get.php request) and then visiting the include/...

Centreon Centreon>=19.04.0<19.04.15

● CVE-2019-19487

Command Injection in minPlayCommand.php in Centreon (19.04.4 and below) allows an attacker to achieve command injection via a plugin test.

Centreon Centreon<=19.04.4

● CVE-2019-19484

Open redirect via parameter ‘p’ in login.php in Centreon (19.04.4 and below) allows an attacker to craft a payload and execute unintended behavior.

Centreon Centreon<=19.04.4

● CVE-2019-19486

Local File Inclusion in minPlayCommand.php in Centreon (19.04.4 and below) allows an attacker to traverse paths via a plugin test.

Centreon Centreon<=19.04.4

● CVE-2019-17646

Centreon Centreon>=18.0.0<18.10.8

Centreon Centreon>=19.04.0<19.04.5

Centreon Centreon>=19.10.0<19.10.2

● CVE-2019-17642

An issue was discovered in Centreon before 18.10.8, 19.10.1, and 19.04.2. It allows CSRF with resultant remote command execution via shell metacharacters in a POST to centreon-autodiscovery-server/vie...

Centreon Centreon>=18.0.0<18.10.8

Centreon Centreon>=19.04.0<19.04.2

Centreon Centreon>=19.10.0<19.10.1

● CVE-2019-17645

An issue was discovered in Centreon before 2.8.31, 18.10.9, 19.04.6, and 19.10.3. It provides sensitive information via an unauthenticated direct request for include/configuration/configObject/service...

Centreon Centreon<2.8.31

Centreon Centreon>=18.0.0<18.10.9

Centreon Centreon>=19.04.0<19.04.6

Centreon Centreon>=19.10.0<19.10.3

● CVE-2019-17644

An issue was discovered in Centreon before 2.8-30, 18.10-8, 19.04-5, and 19.10-2.. It provides sensitive information via an unauthenticated direct request for include/configuration/configObject/host/r...

Centreon Centreon<2.8.30

Centreon Centreon>=2.8.4<18.10.8

Centreon Centreon>=19.0.0<19.04.5

Centreon Centreon>=19.04.6<19.10.2

● CVE-2019-17643

Centreon Centreon<2.8.30

Centreon Centreon>=2.8.4<18.10.8

Centreon Centreon>=19.0.0<19.04.5

Centreon Centreon>=19.04.6<19.10.2

● CVE-2020-9463

Centreon 19.10 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the server_ip field in JSON data in an api/internal.php?object=centreon_configuration_remo...

Centreon Centreon=19.10

● CVE-2019-16195

Centreon before 2.8.30, 18.x before 18.10.8, and 19.x before 19.04.5 allows XSS via myAccount alias and name fields.

Centreon Centreon>=2.8.0<2.8.30

Centreon Centreon>=18.0.0<18.10.8

Centreon Centreon>=19.0.0<19.04.5

● CVE-2019-17501

Centreon 19.04 allows attackers to execute arbitrary OS commands via the Command Line field of main.php?p=60807&type=4 (aka the Configuration > Commands > Discovery screen). CVE-2019-17501 and CVE-201...

Centreon Centreon=19.04.0

● CVE-2018-21024

licenseUpload.php in Centreon Web before 2.8.27 allows attackers to upload arbitrary files via a POST request.

Centreon Centreon<2.8.27

● CVE-2019-16194

SQL injection vulnerabilities in Centreon through 19.04 allow attacks via the svc_id parameter in include/monitoring/status/Services/xml/makeXMLForOneService.php.

Centreon Centreon<=19.04.0

● CVE-2019-13024

Centreon 18.x before 18.10.6, 19.x before 19.04.3, and Centreon web before 2.8.29 allows the attacker to execute arbitrary system commands by using the value "init_script"-"Monitoring Engine Binary" i...

Centreon Centreon=19.04.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203