Login Request a demo
CW
Product
Centreon Web
by Centreon · last CVE Feb 27, 2026
56
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities56In the news0Timeline
Severity mix
Critical 8High 27Medium 21Low 0
Severity
All severities56Critical8High27Medium21Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Centreon Web to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-6791
8.8
0%
Aug 22
Second order SQL injection available to user with low privilege
Affected: 23.10.0 before 23.10.26; 24.04.0 before 24.04.16; 24.10.0 before 24.10.9
CVE-2024-39841
8.8
1%
Aug 23
A SQL Injection vulnerability exists in the service configuration functionality in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and…
Affected: 22.10.0 before 22.10.23; 23.04.0 before 23.04.19; 23.10.0 before 23.10.13; 24.04.0 before 24.04.3
CVE-2024-5725
8.8
47%
Aug 21
Centreon initCurveList SQL Injection Remote Code Execution Vulnerability
Affected: before 22.10.23; 23.04.0 before 23.04.19; 23.10.0 before 23.10.13; 24.04.0 before 24.04.3
CVE-2024-5723
8.8
41%
Aug 21
Centreon updateServiceHost SQL Injection Remote Code Execution Vulnerability
Affected: before 22.04.24; 22.10.0 before 22.10.22; 23.04.0 before 23.04.18; 23.10.0 before 23.10.12
CVE-2024-23119
8.8
1%
Apr 1
Centreon insertGraphTemplate SQL Injection Remote Code Execution Vulnerability
Affected: before 22.04.19; 22.10.2 before 22.10.17; 23.04.0 before 23.04.13; 23.10.0 before 23.10.5
CVE-2024-0637
8.8
72%
Apr 1
Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability
Affected: before 22.04.19; 22.10.2 before 22.10.17; 23.04.0 before 23.04.13; 23.10.0 before 23.10.5
CVE-2019-15299
8.8
2%
Feb 24
An issue was discovered in Centreon Web through 19.04.3
Affected: through 19.04.3
CVE-2019-15300
8.8
2%
Nov 27
A problem was found in Centreon Web through 19.04.3
Affected: 2.8.1 before 2.8.30; 19.04.0 before 19.04.5; 19.10.0 before 19.10.2
CVE-2019-15298
8.8
27%
Nov 27
A problem was found in Centreon Web through 19.04.3
Affected: 2.8.1 before 2.8.30; 18.10.0 before 18.10.8; 19.04.0 before 19.04.5; 19.10.0 before 19.10.2
CVE-2019-17107
8.8
4%
Oct 8
minPlayCommand.php in Centreon Web before 2.8.27 allows authenticated attackers to execute arbitrary code via the command_hostaddress parameter
Affected: 2.8 before 2.8.27; 18.10.0 before 18.10.4
CVE-2018-21023
8.8
3%
Oct 8
getStats.php in Centreon Web before 2.8.28 allows authenticated attackers to execute arbitrary code via the ns_id parameter
Affected: 2.8 before 2.8.28; 18.10.0 before 18.10.5
CVE-2018-21022
8.8
2%
Oct 8
makeXML_ListServices.php in Centreon Web before 2.8.28 allows attackers to perform SQL injections via the host_id parameter
Affected: before 2.8.28
CVE-2018-21021
8.8
2%
Oct 8
img_gantt.php in Centreon Web before 2.8.27 allows attackers to perform SQL injections via the host_id parameter
Affected: before 2.8.27
CVE-2019-16406
7.8
0%
Nov 21
Centreon Web 19.04.4 has weak permissions within the OVA (aka VMware virtual machine) and OVF (aka VirtualBox virtual machine) files, allowing attackers to gain privileges via a…
Affected: 19.04.4
CVE-2018-21020
7.5
2%
Oct 8
In very rare cases, a PHP type juggling vulnerability in centreonAuth.class.php in Centreon Web before 2.8.27 allows attackers to bypass authentication mechanisms in place
Affected: before 2.8.27
CVE-2025-5965
7.2
28%
Jan 5
RCE via the backup feature available only to user with high privilege
Affected: 24.04.0 before 24.04.19; 24.10.0 before 24.10.15; 25.10.0 before 25.10.2
CVE-2025-5946
7.2
14%
Oct 14
RCE via the poller reload feature available only to user with high privilege
Affected: 23.10.0 before 23.10.28; 24.04.0 before 24.04.18; 24.10.0 before 24.10.13
CVE-2025-4650
7.2
0%
Aug 22
User with high privileges is able to introduce a SQLi using the Meta Service indicator page
Affected: 23.10.0 before 23.10.26; 24.04.0 before 24.04.16; 24.10.0 before 24.10.9
CVE-2025-4646
7.2
0%
May 13
A high privilege user is able to create and use a valid admin API token in centreon-web
Affected: 24.04.0 before 24.04.10; 24.10.0 before 24.10.4
CVE-2025-3872
7.2
0%
Apr 24
Privilege escalation by altering payload in contact form
Affected: 22.10.0 before 22.10.28; 23.04.0 before 23.04.25; 23.10.0 before 23.10.20; 24.04.0 before 24.04.10; 24.10.0 before 24.10.4
CVE-2024-53923
7.2
0%
Jan 23
An issue was discovered in Centreon Web 24.10.x before 24.10.3, 24.04.x before 24.04.9, 23.10.x before 23.10.19, 23.04.x before 23.04.24
Affected: 23.04.0 before 23.04.24; 23.10.0 before 23.10.19; 24.04.0 before 24.04.9; 24.10.0 before 24.10.3
CVE-2024-55573
7.2
1%
Jan 23
An issue was discovered in Centreon centreon-web 24.10.x before 24.10.3, 24.04.x before 24.04.9, 23.10.x before 23.10.19, 23.04.x before 23.04.24
Affected: 23.04.0 before 23.04.24; 23.10.0 before 23.10.19; 24.04.0 before 24.04.9; 24.10.0 before 24.10.3
CVE-2024-23118
7.2
53%
Apr 1
Centreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability
Affected: before 22.04.19; 22.10.2 before 22.10.17; 23.04.0 before 23.04.13; 23.10.0 before 23.10.5
CVE-2024-23117
7.2
53%
Apr 1
Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability
Affected: before 22.04.19; 22.10.2 before 22.10.17; 23.04.0 before 23.04.13; 23.10.0 before 23.10.5
CVE-2024-23116
7.2
53%
Apr 1
Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability
Affected: before 22.04.19; 22.10.2 before 22.10.17; 23.04.0 before 23.04.13; 23.10.0 before 23.10.5
CVE-2024-23115
7.2
67%
Apr 1
Centreon updateGroups SQL Injection Remote Code Execution Vulnerability
Affected: before 22.04.19; 22.10.2 before 22.10.17; 23.04.0 before 23.04.13; 23.10.0 before 23.10.5
CVE-2019-16405
7.2
27%
Nov 21
Centreon Web before 2.8.30, 18.10.x before 18.10.8, 19.04.x before 19.04.5 and 19.10.x before 19.10.2 allows Remote Code Execution by an administrator who can modify Macro…
Affected: before 2.8.30; 18.10.0 before 18.10.8; 19.04.0 before 19.04.5; 19.10.0 before 19.10.2
Showing 27