Advisories · Technology
Centreon web.
Every CVE that names Centreon web among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
Second order SQL injection available to user with low privilege
- Centreon web
- SQL injection
- CVSS 7.2 High
User with high privileges is able to introduce a SQLi using the Meta Service indicator page
- Centreon web
- SQL injection
- CVSS 4.9 Medium
ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs.
- Centreon web
- CWE-755
- CVSS 8.4 High
A user with elevated privileges can inject XSS by altering the content of a SVG media during the submit request.
- Centreon web
- Unrestricted file upload
- CVSS 8.4 High
A user with elevated privileges can bypass sanitization measures by replacing the content of an existing SVG
- Centreon web
- Cross-site scripting (XSS)
- CVSS 7.2 High
A high privilege user is able to create and use a valid admin API token in centreon-web
- Centreon web
- Broken access control
-
Centreon: SQL injection vulnerability in menuXML.php in Centreon 2.3.3 through 2.3.9-4 (fixed in…
- Centreon
- Centreon web