Latest Centreon Vulnerabilities

● CVE-2023-51633

Centreon sysName Cross-Site Scripting Remote Code Execution Vulnerability

Centreon Centreon

Centreon sysName Cross-Site Scripting Remote Code Execution Vulnerability

Centreon Centreon

● CVE-2024-23119

Centreon insertGraphTemplate SQL Injection Remote Code Execution Vulnerability

composer/centreon/centreon<22.10.15

● CVE-2024-23118

Centreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability

composer/centreon/centreon<22.10.15

● CVE-2024-23117

Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability

composer/centreon/centreon<22.10.15

● CVE-2024-23116

Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability

composer/centreon/centreon<22.10.15

● CVE-2024-23115

Centreon updateGroups SQL Injection Remote Code Execution Vulnerability

composer/centreon/centreon<22.10.15

● CVE-2024-0637

Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability

composer/centreon/centreon<22.10.15

Centreon insertGraphTemplate SQL Injection Remote Code Execution Vulnerability

Centreon Centreon

Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability

Centreon Centreon

Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability

Centreon Centreon

Centreon updateGroups SQL Injection Remote Code Execution Vulnerability

Centreon Centreon

Centreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability

Centreon Centreon

Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability

Centreon Centreon

● CVE-2022-42425

Centreon Poller Broker SQL Injection Privilege Escalation Vulnerability

Centreon Centreon<21.04.19

Centreon Centreon>=21.10.0<21.10.11

Centreon Centreon>=22.04.0<22.04.6

Centreon Centreon

● CVE-2022-42429

Centreon Poller Broker SQL Injection Privilege Escalation Vulnerability

Centreon Centreon<21.04.19

Centreon Centreon>=21.10.0<21.10.11

Centreon Centreon>=22.04.0<22.04.6

Centreon Centreon

● CVE-2022-42426

Centreon Poller Broker SQL Injection Privilege Escalation Vulnerability

Centreon Centreon<21.04.19

Centreon Centreon>=21.10.0<21.10.11

Centreon Centreon>=22.04.0<22.04.6

Centreon Centreon

● CVE-2022-42424

Centreon Poller Broker SQL Injection Privilege Escalation Vulnerability

Centreon Centreon<21.04.19

Centreon Centreon>=21.10.0<21.10.11

Centreon Centreon>=22.04.0<22.04.6

Centreon Centreon

● CVE-2022-42428

Centreon Poller Broker SQL Injection Privilege Escalation Vulnerability

Centreon Centreon<21.04.19

Centreon Centreon>=21.10.0<21.10.11

Centreon Centreon>=22.04.0<22.04.6

Centreon Centreon

● CVE-2022-41142

Centreon Poller Resource SQL Injection Privilege Escalation Vulnerability

Centreon Centreon=22.04.2

Centreon Centreon

● CVE-2022-3827

A vulnerability was found in centreon. It has been declared as critical. This vulnerability affects unknown code of the file formContactGroup.php of the component Contact Groups Form. The manipulation...

Centreon Centreon<22.10.0

● CVE-2022-39988

A cross-site scripting (XSS) vulnerability in Centreon 22.04.0 allows attackers to execute arbitrary web script or HTML via a crafted payload injected into the Service>Templates service_alias paramete...

Centreon Centreon=22.04.0

● CVE-2022-40044

Centreon v20.10.18 was discovered to contain a cross-site scripting (XSS) vulnerability via the esc_name (Escalation Name) parameter at Configuration/Notifications/Escalations. This vulnerability allo...

Centreon Centreon=20.10.18

● CVE-2022-40043

Centreon v20.10.18 was discovered to contain a SQL injection vulnerability via the esc_name (Escalation Name) parameter at Configuration/Notifications/Escalations.

Centreon Centreon=20.10.18

● CVE-2022-36194

Centreon 22.04.0 is vulnerable to Cross Site Scripting (XSS) from the function Pollers > Broker Configuration by adding a crafted payload into the name parameter.

Centreon Centreon=22.04.0

● CVE-2022-34871

Centreon Poller Resource SQL Injection Privilege Escalation Vulnerability

Centreon Centreon=21.10.2

Centreon Centreon

● CVE-2022-34872

Centreon Virtual Metrics SQL Injection Information Disclosure Vulnerability

Centreon Centreon=21.10.2

Centreon Centreon

● CVE-2020-22345

/graphStatus/displayServiceStatus.php in Centreon 19.10.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the RRDdatabase_path parameter.

Centreon Centreon=19.10.8

● CVE-2021-37557

A SQL injection vulnerability in image generation in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-privileged) attackers to execute arbitrary SQL commands via the...

Centreon Centreon<20.04.14

Centreon Centreon>=20.10.0<20.10.8

Centreon Centreon>=21.04.0<21.04.2

● CVE-2021-37556

A SQL injection vulnerability in reporting export in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-privileged) attackers to execute arbitrary SQL commands via the...

Centreon Centreon<20.04.14

Centreon Centreon>=20.10.0<20.10.8

Centreon Centreon>=21.04.0<21.04.2

● CVE-2021-28053

An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A SQL injection vulnerability in "Configuration > Users > Contacts / Users" allows remote authenticated users to execute arbitrary...

Centreon Centreon=20.10.0

● CVE-2021-28054

An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A Stored Cross-Site Scripting (XSS) issue in "Configuration > Hosts" allows remote authenticated users to inject arbitrary web scr...

Centreon Centreon=20.10.0

● CVE-2021-27676

Centreon Centreon=20.10.2

● CVE-2021-26804

Insecure Permissions in Centreon Web versions 19.10.18, 20.04.8, and 20.10.2 allows remote attackers to bypass validation by changing any file extension to ".gif", then uploading it in the "Administra...

Centreon Centreon Web=19.10.18

Centreon Centreon Web=20.04.8

Centreon Centreon Web=20.10.2

● CVE-2020-22425

Centreon 19.10-3.el7 is affected by a SQL injection vulnerability, where an authorized user is able to inject additional SQL queries to perform remote command execution.

Centreon Centreon=19.10

● CVE-2020-10946

Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the page parameter to service-monitoring/src/index.php. This vulnerability is fixed in versi...

Centreon Centreon Host-monitoring Widget<1.6.4

Centreon Centreon Host-monitoring Widget>=18.10.0<18.10.3

Centreon Centreon Host-monitoring Widget>=19.0.0<19.0.1

Centreon Centreon Host-monitoring Widget>=19.04.0<19.04.3

Centreon Centreon Tactical-overview Widget<1.0.3

Centreon Centreon Tactical-overview Widget>=18.10.0<18.10.1

and 6 more

● CVE-2020-13627

Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the widgetId parameter to service-monitoring/src/index.php. This vulnerability is fixed in v...

Centreon Centreon Host-monitoring Widget<1.6.4

Centreon Centreon Host-monitoring Widget>=18.10.0<18.10.3

Centreon Centreon Host-monitoring Widget>=19.0.0<19.0.1

Centreon Centreon Host-monitoring Widget>=19.04.0<19.04.3

Centreon Centreon Tactical-overview Widget<1.0.3

Centreon Centreon Tactical-overview Widget>=18.10.0<18.10.1

and 6 more

● CVE-2020-13628

Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the widgetId parameter to host-monitoring/src/toolbar.php. This vulnerability is fixed in ve...

Centreon Centreon Host-monitoring Widget<1.6.4

Centreon Centreon Host-monitoring Widget>=18.10.0<18.10.3

Centreon Centreon Host-monitoring Widget>=19.0.0<19.0.1

Centreon Centreon Host-monitoring Widget>=19.04.0<19.04.3

Centreon Centreon Tactical-overview Widget<1.0.3

Centreon Centreon Tactical-overview Widget>=18.10.0<18.10.1

and 6 more

● CVE-2020-10945

Centreon before 19.10.7 exposes Session IDs in server responses.

composer/centreon/centreon<2.8.32

composer/centreon/centreon>=18.0.0<18.10.11

composer/centreon/centreon>=19.0.0<19.04.10

composer/centreon/centreon>=19.10.0<19.10.7

Centreon Centreon<=2.8.2

Centreon Centreon>=18.10.0<18.10.11

and 6 more

● CVE-2020-13252

Centreon before 19.04.15 allows remote attackers to execute arbitrary OS commands by placing shell metacharacters in RRDdatabase_status_path (via a main.get.php request) and then visiting the include/...

Centreon Centreon>=19.04.0<19.04.15

● CVE-2019-19487

Command Injection in minPlayCommand.php in Centreon (19.04.4 and below) allows an attacker to achieve command injection via a plugin test.

Centreon Centreon<=19.04.4

● CVE-2019-19484

Open redirect via parameter ‘p’ in login.php in Centreon (19.04.4 and below) allows an attacker to craft a payload and execute unintended behavior.

Centreon Centreon<=19.04.4

● CVE-2019-19486

Local File Inclusion in minPlayCommand.php in Centreon (19.04.4 and below) allows an attacker to traverse paths via a plugin test.

Centreon Centreon<=19.04.4

● CVE-2019-17646

Centreon Centreon>=18.0.0<18.10.8

Centreon Centreon>=19.04.0<19.04.5

Centreon Centreon>=19.10.0<19.10.2

● CVE-2019-17642

An issue was discovered in Centreon before 18.10.8, 19.10.1, and 19.04.2. It allows CSRF with resultant remote command execution via shell metacharacters in a POST to centreon-autodiscovery-server/vie...

Centreon Centreon>=18.0.0<18.10.8

Centreon Centreon>=19.04.0<19.04.2

Centreon Centreon>=19.10.0<19.10.1

● CVE-2019-17645

An issue was discovered in Centreon before 2.8.31, 18.10.9, 19.04.6, and 19.10.3. It provides sensitive information via an unauthenticated direct request for include/configuration/configObject/service...

Centreon Centreon<2.8.31

Centreon Centreon>=18.0.0<18.10.9

Centreon Centreon>=19.04.0<19.04.6

Centreon Centreon>=19.10.0<19.10.3

● CVE-2019-17643

Centreon Centreon<2.8.30

Centreon Centreon>=2.8.4<18.10.8

Centreon Centreon>=19.0.0<19.04.5

Centreon Centreon>=19.04.6<19.10.2

● CVE-2019-17644

An issue was discovered in Centreon before 2.8-30, 18.10-8, 19.04-5, and 19.10-2.. It provides sensitive information via an unauthenticated direct request for include/configuration/configObject/host/r...

Centreon Centreon<2.8.30

Centreon Centreon>=2.8.4<18.10.8

Centreon Centreon>=19.0.0<19.04.5

Centreon Centreon>=19.04.6<19.10.2

● CVE-2020-9463

Centreon 19.10 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the server_ip field in JSON data in an api/internal.php?object=centreon_configuration_remo...

Centreon Centreon=19.10

● CVE-2019-15299

Centreon Centreon Web<=19.04.3

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203