Centreon web vulnerabilities
6 published CVEs name Centreon web among the affected products.
- Published CVEs
- 6
- Last 12 months
- 0
- Critical
- 0
- Known exploited
- 0
Critical 0High 5Medium 1Low 0Not scored 0
Newest CVEs
- CVE-2025-6791
Second order SQL injection available to user with low privilege
Centreon · web
High8.8 - CVE-2025-4650
User with high privileges is able to introduce a SQLi using the Meta Service indicator page
Centreon · web
High7.2 - CVE-2025-4649
ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs.
Centreon · web
Medium4.9 - CVE-2025-4648
A user with elevated privileges can inject XSS by altering the content of a SVG media during the submit request.
Centreon · web
High8.4 - CVE-2025-4647
A user with elevated privileges can bypass sanitization measures by replacing the content of an existing SVG
Centreon · web
High8.4 - CVE-2025-4646
A high privilege user is able to create and use a valid admin API token in centreon-web
Centreon · web
High7.2