Login Request a demo
CE
Product
Centreon
by Centreon · last CVE Oct 29, 2026
76
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Vulnerabilities76In the news0Timeline
Severity mix
Critical 10High 42Medium 18Low 0
Severity
All severities76Critical10High42Medium18Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Centreon to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-32501
9.8
19%
Aug 23
A SQL Injection vulnerability exists in the updateServiceHost functionality in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x…
Affected: 22.10.0 before 22.10.23; 23.04.0 before 23.04.19; 23.10.0 before 23.10.13; 24.04.0 before 24.04.3
CVE-2022-3827
9.8
1%
Nov 2
centreon Contact Groups Form formContactGroup.php sql injection
Affected: before 22.10.0
CVE-2021-37558
9.8
2%
Aug 3
A SQL injection vulnerability in a MediaWiki script in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote unauthenticated attackers to execute arbitrary SQL commands via…
Affected: before 20.04.14; 20.10.0 before 20.10.8; 21.04.0 before 21.04.2
CVE-2019-17647
9.8
2%
Mar 5
An issue was discovered in Centreon before 2.8.30, 18.10.8, 19.04.5, and 19.10.2
Affected: before 2.8.30; 18.0.0 before 18.10.8; 19.04.0 before 19.04.5; 19.10.0 before 19.10.2
CVE-2018-21024
9.8
2%
Oct 8
licenseUpload.php in Centreon Web before 2.8.27 allows attackers to upload arbitrary files via a POST request
Affected: before 2.8.27
CVE-2019-16194
9.8
1%
Sep 25
SQL injection vulnerabilities in Centreon through 19.04 allow attacks via the svc_id parameter in include/monitoring/status/Services/xml/makeXMLForOneService.php
Affected: through 19.04.0
CVE-2018-19281
9.8
2%
Nov 14
Centreon 3.4.x (fixed in Centreon 18.10.0 and Centreon web 2.8.27) allows SNMP trap SQL Injection
Affected: 3.4
CVE-2018-11589
9.8
2%
Jun 25
Multiple SQL injection vulnerabilities in Centreon 3.4.6 including Centreon Web 2.8.23 allow attacks via the searchU parameter in viewLogs.php, the id parameter in GetXmlHost.php,…
Affected: 3.4.6
CVE-2018-11587
9.8
4%
Jun 25
There is Remote Code Execution in Centreon 3.4.6 including Centreon Web 2.8.23 via the RPN value in the Virtual Metric form in centreonGraph.class.php
Affected: 3.4.6
CVE-2023-51633
9.6
1%
May 3
Centreon sysName Cross-Site Scripting Remote Code Execution Vulnerability
Affected: 23.04
Showing 10