CVE Program partner

Centreon

Centreon

API
CVEs, 365 days1635 all time, 2 rejected
Quality95%median 99%
CVSS by the CNA100%share of records
CWE87%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationCentreon
RoleCNA
TypeVendor, Open Source
Reports tomitre
ScopeAll Centreon product issues only.
Advisorieshttps://thewatch.centreon.com/latest-security-bulletins-64

Latest CVEs · RSS

  • CVE-2026-14453 2026-07-13 · CVSS 9.6
    This vulnerability is a critical Server-Side Template Injection (SSTI) in Centreon's centreon-open-tickets module that leads to Remote Code Execution. The messa
  • CVE-2026-2749 2026-02-27 · CVSS 9.9
    Vulnerability in Centreon Centreon Open Tickets on Central Server on Linux (Centroen Open Ticket modules).This issue affects Centreon Open Tickets on Central Se
  • CVE-2026-2750 2026-02-27 · CVSS 9.1
    Improper Input Validation vulnerability in Centreon Centreon Open Tickets on Central Server on Linux (Centreon Open Tickets modules).This issue affects Centreon
  • CVE-2026-2751 2026-02-27 · CVSS 8.3
    Blind SQL Injection via unsanitized array keys in Service Dependencies deletion. Vulnerability in Centreon Centreon Web on Central Server on Linux (Service Depe
  • CVE-2025-15029 2026-01-05 · CVSS 9.8
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon Infra Monitoring (Awie export modules) allows SQL
  • CVE-2025-15026 2026-01-05 · CVSS 9.8
    Missing Authentication for Critical Function vulnerability in Centreon Infra Monitoring centreon-awie (Awie import module) allows Accessing Functionality Not Pr
  • CVE-2025-12511 2026-01-05 · CVSS 6.8
    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (DSM extenstio configurat
  • CVE-2025-12513 2026-01-05 · CVSS 6.8
    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Hosts configuration form
  • CVE-2025-12519 2026-01-05 · CVSS 5.3
    Missing Authorization vulnerability in Centreon Infra Monitoring (Administration parameters API endpoint modules) allows Accessing Functionality Not Properly Co
  • CVE-2025-13056 2026-01-05 · CVSS 6.8
    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Administration ACL menu
  • CVE-2025-5965 2026-01-05 · CVSS 7.2
    In the backup parameters, a user with high privilege is able to concatenate custom instructions to the backup setup. Improper Neutralization of Special Elements
  • CVE-2025-54890 2025-12-22 · CVSS 6.8
    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Hostgroup configuration
  • CVE-2025-12514 2025-12-22 · CVSS 7.2
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon Infra Monitoring - Open-tickets (Notification rul
  • CVE-2025-8460 2025-12-22 · CVSS 6.8
    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Notification rules, Open
  • CVE-2025-10023 2025-10-27 · CVSS 6.2
    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Services Meta-services m
  • CVE-2025-8432 2025-10-27 · CVSS 8.4
    Incorrect Default Permissions vulnerability in Centreon Infra Monitoring (MBI modules) allows Embedding Scripts within Scripts by CentreonBI user account on the
  • CVE-2025-8459 2025-10-14 · CVSS 7.7
    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Monitoring recurrent dow
  • CVE-2025-8430 2025-10-14 · CVSS 6.8
    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Commands Connectors conf
  • CVE-2025-8429 2025-10-14 · CVSS 6.8
    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (ACL Action access config
  • CVE-2025-54893 2025-10-14 · CVSS 6.8
    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Hosts templates configur
  • CVE-2025-54891 2025-10-14 · CVSS 6.8
    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (ACL Resource access conf
  • CVE-2025-54892 2025-10-14 · CVSS 6.8
    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (SNMP traps group configu
  • CVE-2025-54889 2025-10-14 · CVSS 6.8
    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (SNMP traps manufacturer
  • CVE-2025-5946 2025-10-14 · CVSS 7.2
    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Centreon Infra Monitoring (Poller reload setup in th
  • CVE-2025-8428 2025-10-14 · CVSS 6.8
    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (HTTP Loader widget modul

All CVE Program partners