CW
Product
Centreon Web
56
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 27Medium 21Low 0
Watch
Add Centreon Web to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-8429 | 4.8 | Oct 14 | A user with elevated privileges can inject XSS in the ACL Action access configuration page Affected: 23.10.0 before 23.10.28; 24.04.0 before 24.04.18; 24.10.0 before 24.10.13 |
| CVE-2025-54893 | 4.8 | Oct 14 | A user with elevated privileges can inject XSS in the Hosts templates configuration page Affected: 23.10.0 before 23.10.28; 24.04.0 before 24.04.18; 24.10.0 before 24.10.13 |
| CVE-2025-54891 | 4.8 | Oct 14 | A user with elevated privileges can inject XSS in the ACL Resource Access configuration page Affected: 23.10.0 before 23.10.28; 24.04.0 before 24.04.18; 24.10.0 before 24.10.13 |
| CVE-2025-54892 | 4.8 | Oct 14 | A user with elevated privileges can inject XSS in the SNMP traps group configuration page Affected: 23.10.0 before 23.10.28; 24.04.0 before 24.04.18; 24.10.0 before 24.10.13 |
| CVE-2025-54889 | 4.8 | Oct 14 | A user with elevated privileges can inject XSS in the SNMP traps manufacturer configuration page Affected: 23.10.0 before 23.10.28; 24.04.0 before 24.04.18; 24.10.0 before 24.10.13 |
| CVE-2025-4647 | 4.8 | May 13 | A user with elevated privileges can bypass sanitization measures by replacing the content of an existing SVG Affected: 22.10.0 before 22.10.29; 23.04.0 before 23.04.27; 23.10.0 before 23.10.22; 24.04.0 before 24.04.11; 24.10.0 before 24.10.5 |