<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: centreon-web</title><description>Every new CVE for centreon-web.</description><link>https://agentprime.io/</link><item><title>CVE-2025-6791: Second order SQL injection available to user with low privilege</title><link>https://agentprime.io/advisories/CVE-2025-6791/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-6791/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 22 Aug 2025 18:56:28 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-4650: User with high privileges is able to introduce a SQLi using the Meta Service indicator page</title><link>https://agentprime.io/advisories/CVE-2025-4650/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-4650/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 22 Aug 2025 18:50:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-4649: ACL are not correctly taken into account in the display of the &quot;event logs&quot; page. This page requiring, high privileges, will display all available logs.</title><link>https://agentprime.io/advisories/CVE-2025-4649/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-4649/</guid><description>CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 May 2025 11:40:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-4648: A user with elevated privileges can inject XSS by altering the content of a SVG media during the submit request.</title><link>https://agentprime.io/advisories/CVE-2025-4648/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-4648/</guid><description>CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 May 2025 09:45:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-4647: A user with elevated privileges can bypass sanitization measures by replacing the content of an existing SVG</title><link>https://agentprime.io/advisories/CVE-2025-4647/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-4647/</guid><description>CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 May 2025 09:31:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-4646: A high privilege user is able to create and use a valid admin API token in centreon-web</title><link>https://agentprime.io/advisories/CVE-2025-4646/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-4646/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 May 2025 09:17:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2012-5967: Centreon: SQL injection vulnerability in menuXML.php in Centreon 2.3.3 through 2.3.9-4 (fixed in…</title><link>https://agentprime.io/advisories/CVE-2012-5967/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2012-5967/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 19 Dec 2012 11:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>