IM
Product
Infra Monitoring
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 3Medium 15Low 0
Watch
Add Infra Monitoring to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-15029 | 9.8 | Jan 5 | An unauthenticated user is able to introduce SQL Injection using the Awie export module Affected: 25.10.0 before 25.10.2; 24.10.0 before 24.10.3; 24.04.0 before 24.04.3 |
| CVE-2025-15026 | 9.8 | Jan 5 | Unauthenticated configuration import allows administrative account creation using AWIE component Affected: 25.10.0 before 25.10.2; 24.10.0 before 24.10.3; 24.04.0 before 24.04.3 |
| CVE-2026-14453 | 9.6 | Jul 13 | A user with low privileges can inject SSTI templates that can lead to RCE in open-tickets Affected: 24.10.0 before 24.10.14; 25.10.0 before 25.10.9 |
| CVE-2025-8432 | 8.4 | Oct 27 | CentreonBI user account on the MBI server can execute commands as root by modifying script runned by the CRON Affected: 24.10.0 before 24.10.6; 24.04.0 before 24.04.9; 23.10.0 before 23.10.15 |
| CVE-2025-5965 | 7.2 | Jan 5 | RCE via the backup feature available only to user with high privilege Affected: 25.10.0 before 25.10.2; 24.10.0 before 24.10.15; 24.04.0 before 24.04.19 |
| CVE-2025-5946 | 7.2 | Oct 14 | RCE via the poller reload feature available only to user with high privilege Affected: 24.10.0 before 24.10.13; 24.04.0 before 24.04.18; 23.10.0 before 23.10.28 |
| CVE-2025-8459 | 5.4 | Oct 14 | A user with low privileges can inject XSS in the Monitoring Recurrent downtimes page Affected: 24.10.0 before 24.10.13; 24.04.0 before 24.04.18; 23.10.0 before 23.10.28 |
| CVE-2025-8428 | 5.4 | Oct 14 | XSS found in the HTTP loader widget Affected: 24.10.0 before 24.10.13; 24.04.0 before 24.04.18; 23.10.0 before 23.10.28 |
| CVE-2025-12519 | 5.3 | Jan 5 | Information disclosure on Administration parameters API endpoint Affected: 25.10.0 before 25.10.2; 24.10.0 before 24.10.15; 24.04.0 before 24.04.19 |
| CVE-2025-12511 | 4.8 | Jan 5 | A user with elevated privileges can inject XSS in the DSM Administration’s Extensions configuration page Affected: 25.10.0 before 25.10.1; 24.10.0 before 24.10.4; 24.04.0 before 24.04.8 |
| CVE-2025-12513 | 4.8 | Jan 5 | A user with elevated privileges can inject XSS in the Hosts configuration parameters page Affected: 25.10.0 before 25.10.2; 24.10.0 before 24.10.15; 24.04.0 before 24.04.19 |
| CVE-2025-13056 | 4.8 | Jan 5 | A user with elevated privileges can inject XSS in the Administration ACL Menus configuration page Affected: 25.10.0 before 25.10.2; 24.10.0 before 24.10.15; 24.04.0 before 24.04.19 |
| CVE-2025-54890 | 4.8 | Dec 22 | A user with elevated privileges can inject XSS in the Hostgroups configuration page Affected: 24.10.0 before 24.10.15; 24.04.0 before 24.04.19; 23.10.0 before 23.10.29 |
| CVE-2025-8460 | 4.8 | Dec 22 | A user with elevated privileges can inject XSS in the Notification rules configuration page Affected: 24.10.0 before 24.10.5; 24.04.0 before 24.04.5; 23.10.0 before 23.10.4 |
| CVE-2025-10023 | 4.8 | Oct 27 | A user with elevated privileges can inject XSS in the Services Meta-services configuration page Affected: 24.10.0 before 24.10.9; 24.04.0 before 24.04.16; 23.10.0 before 23.10.26 |
| CVE-2025-8430 | 4.8 | Oct 14 | A user with elevated privileges can inject XSS in the Commands Connectors configuration configuration page Affected: 24.10.0 before 24.10.13; 24.04.0 before 24.04.18; 23.10.0 before 23.10.28 |
| CVE-2025-8429 | 4.8 | Oct 14 | A user with elevated privileges can inject XSS in the ACL Action access configuration page Affected: 24.10.0 before 24.10.13; 24.04.0 before 24.04.18; 23.10.0 before 23.10.28 |
| CVE-2025-54893 | 4.8 | Oct 14 | A user with elevated privileges can inject XSS in the Hosts templates configuration page Affected: 24.10.0 before 24.10.13; 24.04.0 before 24.04.18; 23.10.0 before 23.10.28 |
| CVE-2025-54891 | 4.8 | Oct 14 | A user with elevated privileges can inject XSS in the ACL Resource Access configuration page Affected: 24.10.0 before 24.10.13; 24.04.0 before 24.04.18; 23.10.0 before 23.10.28 |
| CVE-2025-54892 | 4.8 | Oct 14 | A user with elevated privileges can inject XSS in the SNMP traps group configuration page Affected: 24.10.0 before 24.10.13; 24.04.0 before 24.04.18; 23.10.0 before 23.10.28 |
| CVE-2025-54889 | 4.8 | Oct 14 | A user with elevated privileges can inject XSS in the SNMP traps manufacturer configuration page Affected: 24.10.0 before 24.10.13; 24.04.0 before 24.04.18; 23.10.0 before 23.10.28 |
Showing 21