Skip to content
Noroxi

Centreon records

127 published records for vendor centreon.

Researcher profile

Entered KEV
0 · 0%
Weaponized
2 · 1.6%
Pre-auth RCE
7
With a fix record
25.2%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

127 records
  • CVE-2022-41142
    61This week

    This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon.

    HighCVSS 8.8No exploitEPSS 85%

    centreon · centreonJan 26, 2023

  • CVE-2022-42425
    58Plan

    This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon.

    HighCVSS 8.8No exploitEPSS 76%

    centreon · centreonMar 29, 2023

  • CVE-2022-42427
    58Plan

    This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon.

    HighCVSS 8.8No exploitEPSS 76%

    centreon · centreonMar 29, 2023

  • CVE-2022-42424
    58Plan

    This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon.

    HighCVSS 8.8No exploitEPSS 76%

    centreon · centreonMar 29, 2023

  • CVE-2022-42429
    58Plan

    This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon.

    HighCVSS 8.8No exploitEPSS 76%

    centreon · centreonMar 29, 2023

  • CVE-2024-0637
    57Plan

    Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 72%

    centreon · centreon webApr 1, 2024

  • CVE-2024-5725
    49Plan

    Centreon initCurveList SQL Injection Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 47%

    centreon · centreon webAug 21, 2024

  • CVE-2024-23115
    48Plan

    Centreon updateGroups SQL Injection Remote Code Execution Vulnerability

    HighCVSS 7.2No exploitEPSS 67%

    centreon · centreon webApr 1, 2024

  • CVE-2024-5723
    47Plan

    Centreon updateServiceHost SQL Injection Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 41%

    centreon · centreon webAug 21, 2024

  • CVE-2019-13024
    45Plan

    Centreon 18.x before 18.10.6, 19.x before 19.04.3, and Centreon web before 2.8.29 allows the attacker to execute arbitrary system commands b

    HighCVSS 8.8Proof of conceptEPSS 32%

    centreon · centreonJul 1, 2019

  • CVE-2024-32501
    45Plan

    A SQL Injection vulnerability exists in the updateServiceHost functionality in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13,

    CriticalCVSS 9.8No exploitEPSS 19%

    centreon · centreon webAug 23, 2024

  • CVE-2024-23117
    44Plan

    Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability

    HighCVSS 7.2No exploitEPSS 53%

    centreon · centreon webApr 1, 2024

  • CVE-2024-23118
    44Plan

    Centreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability

    HighCVSS 7.2No exploitEPSS 53%

    centreon · centreon webApr 1, 2024

  • CVE-2024-23116
    44Plan

    Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability

    HighCVSS 7.2No exploitEPSS 53%

    centreon · centreon webApr 1, 2024

  • CVE-2021-37557
    43Plan

    A SQL injection vulnerability in image generation in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-pri

    HighCVSS 8.8No exploitEPSS 27%

    centreon · centreonAug 3, 2021

  • CVE-2021-37556
    43Plan

    A SQL injection vulnerability in reporting export in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-pri

    HighCVSS 8.8No exploitEPSS 27%

    centreon · centreonAug 3, 2021

  • CVE-2019-15298
    43Plan

    A problem was found in Centreon Web through 19.04.3.

    HighCVSS 8.8No exploitEPSS 27%

    centreon · centreon webNov 27, 2019

  • CVE-2025-15029
    43Plan

    An unauthenticated user is able to introduce SQL Injection using the Awie export module

    CriticalCVSS 9.8No exploitEPSS 13%

    centreon · awieJan 5, 2026

  • CVE-2018-11587
    40Plan

    There is Remote Code Execution in Centreon 3.4.6 including Centreon Web 2.8.23 via the RPN value in the Virtual Metric form in centreonGraph

    CriticalCVSS 9.8No exploitEPSS 4%

    centreon · centreonJun 25, 2018

  • CVE-2018-21025
    40Plan

    In Centreon VM through 19.04.3, centreon-backup.pl allows attackers to become root via a crafted script, due to incorrect rights of sourced

    CriticalCVSS 9.8No exploitEPSS 3%

    centreon · centreon vmOct 8, 2019

  • CVE-2018-21024
    40Plan

    licenseUpload.php in Centreon Web before 2.8.27 allows attackers to upload arbitrary files via a POST request.

    CriticalCVSS 9.8No exploitEPSS 2%

    centreon · centreonOct 8, 2019

  • CVE-2018-11589
    40Plan

    Multiple SQL injection vulnerabilities in Centreon 3.4.6 including Centreon Web 2.8.23 allow attacks via the searchU parameter in viewLogs.p

    CriticalCVSS 9.8No exploitEPSS 2%

    centreon · centreonJun 25, 2018

  • CVE-2021-37558
    40Plan

    A SQL injection vulnerability in a MediaWiki script in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote unauthenticated attacker

    CriticalCVSS 9.8No exploitEPSS 2%

    centreon · centreonAug 3, 2021

  • CVE-2019-17647
    40Plan

    An issue was discovered in Centreon before 2.8.30, 18.10.8, 19.04.5, and 19.10.2.

    CriticalCVSS 9.8No exploitEPSS 2%

    centreon · centreonMar 5, 2020

  • CVE-2018-19281
    40Plan

    Centreon 3.4.x (fixed in Centreon 18.10.0 and Centreon web 2.8.27) allows SNMP trap SQL Injection.

    CriticalCVSS 9.8No exploitEPSS 2%

    centreon · centreonNov 14, 2018