Login Request a demo
CE
Vendor
Centreon
16 products with CVEs on record
182
CVEs
0
On KEV
3
New 30D
Products
CE
Centreon
Centreon
9.8
76 CVEs0 on KEV3 new
CW
Centreon Web
Centreon
9.8
56 CVEs0 on KEV0 new
IM
Infra Monitoring
Centreon
9.8
21 CVEs0 on KEV0 new
WE
web
Centreon
9.8
7 CVEs0 on KEV0 new
CH
Centreon Host-monitoring Widget
Centreon
6.1
3 CVEs0 on KEV0 new
CS
Centreon Service-monitoring Widget
Centreon
6.1
3 CVEs0 on KEV0 new
CT
Centreon Tactical-overview Widget
Centreon
6.1
3 CVEs0 on KEV0 new
OT
Open Tickets
Centreon
8.8
3 CVEs0 on KEV0 new
AW
Awie
Centreon
9.8
2 CVEs0 on KEV0 new
CV
Centreon VM
Centreon
9.8
2 CVEs0 on KEV0 new
CB
Centreon BAM
Centreon
7.2
1 CVEs0 on KEV0 new
CO
Centreon Open Tickets on Central Server
Centreon
9.8
1 CVEs0 on KEV0 new
CW
Centreon Web on Central Server
Centreon
9.8
1 CVEs0 on KEV0 new
DS
Dynamic Service Management
Centreon
4.8
1 CVEs0 on KEV0 new
IM
Infra Monitoring - Open-tickets
Centreon
7.2
1 CVEs0 on KEV0 new
WI
Widget-host-monitoring
Centreon
4.3
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-11587
New
CE
Centreon
Centreon
7.2–Oct 29Authenticated SQL Injection via PHP Array Key in ACL Management (Resources & Actions) — Centreon 26.03.0
CVE-2025-12523
New
CE
Centreon
Centreon
6.5–Oct 29Broken Object Level Authorization in Users Configuration Endpoint (/centreon/api/latest/configuration/users) – Sensitive Information Disclosure
CVE-2025-13050
New
CE
Centreon
Centreon
5.4–Oct 29Broken Function Level Authorization — `postcommand.php` allows execution of poller post-restart commands by non-admin users
CVE-2026-14453
IM
Infra Monitoring
Centreon
9.6
1%
Jul 13A user with low privileges can inject SSTI templates that can lead to RCE in open-tickets
CVE-2026-2749
OT
Open Tickets
Centreon
8.8
1%
Feb 27Path traversal in Centreon Open Tickets
CVE-2026-2750
CO
Centreon Open Tickets on Central Server
Centreon
9.8
0%
Feb 27Command Injection via CLAPI generatetraps
CVE-2026-2751
CW
Centreon Web on Central Server
Centreon
9.8
0%
Feb 27Blind SQL Injection
CVE-2025-15029
IM
Infra Monitoring
Centreon
9.8
13%
Jan 5An unauthenticated user is able to introduce SQL Injection using the Awie export module
CVE-2025-15026
IM
Infra Monitoring
Centreon
9.8
0%
Jan 5Unauthenticated configuration import allows administrative account creation using AWIE component
CVE-2025-12511
IM
Infra Monitoring
Centreon
4.8
0%
Jan 5A user with elevated privileges can inject XSS in the DSM Administration’s Extensions configuration page
CVE-2025-12513
IM
Infra Monitoring
Centreon
4.8
0%
Jan 5A user with elevated privileges can inject XSS in the Hosts configuration parameters page
CVE-2025-12519
IM
Infra Monitoring
Centreon
5.3
0%
Jan 5Information disclosure on Administration parameters API endpoint
CVE-2025-13056
IM
Infra Monitoring
Centreon
4.8
0%
Jan 5A user with elevated privileges can inject XSS in the Administration ACL Menus configuration page
CVE-2025-5965
IM
Infra Monitoring
Centreon
7.2
28%
Jan 5RCE via the backup feature available only to user with high privilege
CVE-2025-54890
IM
Infra Monitoring
Centreon
4.8
0%
Dec 22A user with elevated privileges can inject XSS in the Hostgroups configuration page
CVE-2025-12514
IM
Infra Monitoring - Open-tickets
Centreon
7.2
0%
Dec 22A user with elevated privileges is able to introduce a SQL Injection using the Open-tickets Notification rules configuration parameters
CVE-2025-8460
IM
Infra Monitoring
Centreon
4.8
0%
Dec 22A user with elevated privileges can inject XSS in the Notification rules configuration page
CVE-2025-10023
IM
Infra Monitoring
Centreon
4.8
0%
Oct 27A user with elevated privileges can inject XSS in the Services Meta-services configuration page
CVE-2025-8432
IM
Infra Monitoring
Centreon
8.4
0%
Oct 27CentreonBI user account on the MBI server can execute commands as root by modifying script runned by the CRON
CVE-2025-8459
IM
Infra Monitoring
Centreon
5.4
0%
Oct 14A user with low privileges can inject XSS in the Monitoring Recurrent downtimes page
CVE-2025-8430
IM
Infra Monitoring
Centreon
4.8
0%
Oct 14A user with elevated privileges can inject XSS in the Commands Connectors configuration configuration page
CVE-2025-8429
IM
Infra Monitoring
Centreon
4.8
0%
Oct 14A user with elevated privileges can inject XSS in the ACL Action access configuration page
CVE-2025-54893
IM
Infra Monitoring
Centreon
4.8
0%
Oct 14A user with elevated privileges can inject XSS in the Hosts templates configuration page
CVE-2025-54891
IM
Infra Monitoring
Centreon
4.8
0%
Oct 14A user with elevated privileges can inject XSS in the ACL Resource Access configuration page
CVE-2025-54892
IM
Infra Monitoring
Centreon
4.8
0%
Oct 14A user with elevated privileges can inject XSS in the SNMP traps group configuration page
CVE-2025-54889
IM
Infra Monitoring
Centreon
4.8
0%
Oct 14A user with elevated privileges can inject XSS in the SNMP traps manufacturer configuration page
CVE-2025-5946
IM
Infra Monitoring
Centreon
7.2
14%
Oct 14RCE via the poller reload feature available only to user with high privilege
CVE-2025-8428
IM
Infra Monitoring
Centreon
5.4
0%
Oct 14XSS found in the HTTP loader widget
CVE-2025-6791
WE
web
Centreon
8.8
0%
Aug 22Second order SQL injection available to user with low privilege
CVE-2025-4650
WE
web
Centreon
7.2
0%
Aug 22User with high privileges is able to introduce a SQLi using the Meta Service indicator page
CVE-2025-4649
WE
web
Centreon
4.9
0%
May 13ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs.
CVE-2025-4648
WE
web
Centreon
5.9
0%
May 13A user with elevated privileges can inject XSS by altering the content of a SVG media during the submit request.
CVE-2025-4647
WE
web
Centreon
4.8
0%
May 13A user with elevated privileges can bypass sanitization measures by replacing the content of an existing SVG
CVE-2025-4646
WE
web
Centreon
7.2
0%
May 13A high privilege user is able to create and use a valid admin API token in centreon-web
CVE-2025-3872
CE
Centreon
Centreon
7.2
0%
Apr 24Privilege escalation by altering payload in contact form
CVE-2025-3767
CB
Centreon BAM
Centreon
7.2
0%
Apr 22SQL Injection in Centreon BAM boolean KPI listing
CVE-2024-53923
CW
Centreon Web
Centreon
7.2
0%
Jan 23An issue was discovered in Centreon Web 24.10.x before 24.10.3, 24.04.x before 24.04.9, 23.10.x before 23.10.19, 23.04.x before 23.04.24
CVE-2024-55573
CW
Centreon Web
Centreon
7.2
1%
Jan 23An issue was discovered in Centreon centreon-web 24.10.x before 24.10.3, 24.04.x before 24.04.9, 23.10.x before 23.10.19, 23.04.x before 23.04.24
CVE-2024-45755
CE
Centreon
Centreon
7.2
0%
Nov 25An issue was discovered in Centreon centreon-dsm-server 24.10.x before 24.10.0, 24.04.x before 24.04.3, 23.10.x before 23.10.1, 23.04.x before 23.04.3, and 22.10.x before 22.10.2
CVE-2024-45756
CE
Centreon
Centreon
7.2
0%
Nov 25An issue was discovered in Centreon centreon-open-tickets 24.10.x before 24.10.0, 24.04.x before 24.04.2, 23.10.x before 23.10.1, 23.04.x before 23.04.3, and 22.10.x before…
CVE-2024-45754
CE
Centreon
Centreon
7.2
0%
Oct 11An issue was discovered in the centreon-bi-server component in Centreon BI Server 24.04.x before 24.04.3, 23.10.x before 23.10.8, 23.04.x before 23.04.11, and 22.10.x before…
CVE-2024-39842
CE
Centreon
Centreon
7.2
2%
Sep 23A SQL injection vulnerability in Centreon 24.04.2 allows a remote high-privileged attacker to execute arbitrary SQL command via user massive changes inputs
CVE-2024-39843
CE
Centreon
Centreon
6.7
2%
Sep 23A SQL injection vulnerability in Centreon 24.04.2 allows a remote high-privileged attacker to execute arbitrary SQL command via create user form inputs
CVE-2024-33852
CW
Centreon Web
Centreon
9.1
0%
Aug 23A SQL Injection vulnerability exists in the Downtime component in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x before…
CVE-2024-33853
CW
Centreon Web
Centreon
9.1
0%
Aug 23A SQL Injection vulnerability exists in the Timeperiod component in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x before…
CVE-2024-32501
CW
Centreon Web
Centreon
9.8
19%
Aug 23A SQL Injection vulnerability exists in the updateServiceHost functionality in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x…
CVE-2024-33854
CW
Centreon Web
Centreon
9.1
0%
Aug 23A SQL Injection vulnerability exists in the Graph Template component in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x before…
CVE-2024-39841
CW
Centreon Web
Centreon
8.8
1%
Aug 23A SQL Injection vulnerability exists in the service configuration functionality in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and…
CVE-2024-5725
CE
Centreon
Centreon
8.8
47%
Aug 21Centreon initCurveList SQL Injection Remote Code Execution Vulnerability
CVE-2024-5723
CE
Centreon
Centreon
8.8
41%
Aug 21Centreon updateServiceHost SQL Injection Remote Code Execution Vulnerability
CVE-2023-51633
CE
Centreon
Centreon
9.6
1%
May 3Centreon sysName Cross-Site Scripting Remote Code Execution Vulnerability
CVE-2024-23119
CE
Centreon
Centreon
8.8
1%
Apr 1Centreon insertGraphTemplate SQL Injection Remote Code Execution Vulnerability
CVE-2024-23118
CE
Centreon
Centreon
7.2
53%
Apr 1Centreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability
CVE-2024-23117
CE
Centreon
Centreon
7.2
53%
Apr 1Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability
CVE-2024-23116
CE
Centreon
Centreon
7.2
53%
Apr 1Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability
CVE-2024-23115
CE
Centreon
Centreon
7.2
67%
Apr 1Centreon updateGroups SQL Injection Remote Code Execution Vulnerability
CVE-2024-0637
CE
Centreon
Centreon
8.8
72%
Apr 1Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability
CVE-2022-42425
CE
Centreon
Centreon
8.8
76%
Mar 29This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon
CVE-2022-42426
CE
Centreon
Centreon
8.8
3%
Mar 29This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon
CVE-2022-42424
CE
Centreon
Centreon
8.8
76%
Mar 29This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon