Skip to content
OpenAdvisories

Package · Packagist

centreon/centreon

27 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 6.3
    CVE-2022-3827

    centreon Contact Groups Form formContactGroup.php sql injection

    A vulnerability was found in centreon. It has been declared as critical. This vulnerability affects unknown code of the file formContactGroup.php of the component Contact Groups Form. The manipulation of the argument cg_id leads to sql injection. The attack c…

    centreon/centreon Packagist
  • Medium 5.4
    CVE-2022-40044

    Centreon contains cross-site scripting vulnerability via esc_name parameter

    Centreon v20.10.18 was discovered to contain a cross-site scripting (XSS) vulnerability via the esc_name (Escalation Name) parameter at Configuration/Notifications/Escalations. This vulnerability allows attackers to execute arbitrary web scripts or HTML via i…

    centreon/centreon Packagist
  • Medium 5.4
    CVE-2021-27676

    Cross-site scripting in Centreon

    Centreon version 20.10.2 is affected by a cross-site scripting (XSS) vulnerability. The dep_description (Dependency Description) and dep_name (Dependency Name) parameters are vulnerable to stored XSS. A user has to log in and go to the Configuration > Notific…

    centreon/centreon Packagist
  • Medium 6.5
    CVE-2021-28055

    Predictable CSRF tokens in centreon/centreon

    An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. The anti-CSRF token generation is predictable, which might allow CSRF attacks that add an admin user.

    centreon/centreon Packagist
  • Medium 4.3
    CVE-2020-10945

    Centreon Sensitive Data Exposure vulnerability

    Centreon before 19.10.7 exposes Session IDs in server responses.

    centreon/centreon centreon-engine Ubuntu Packagist
  • Medium 6.5
    CVE-2019-17106

    Centreon Sensitive Data Exposure

    In Centreon Web through 2.8.29, disclosure of external components' passwords allows authenticated attackers to move laterally to external components.

    centreon/centreon Packagist
  • Medium 5.4
    CVE-2018-19311

    Centreon XSS Vulnerability

    Centreon 3.4.x (fixed in Centreon 18.10.0) allows XSS via the Service field to the main.php?p=20201 URI, as demonstrated by the "Monitoring > Status Details > Services" screen.

    centreon/centreon Packagist
  • Medium 6.1
    CVE-2018-19280

    Centreon XSS Vulnerability

    Centreon 3.4.x (fixed in Centreon 18.10.0) has XSS via the resource name or macro expression of a poller macro.

    centreon/centreon Packagist
  • Medium 5.4
    CVE-2015-7672

    Centreon Cross-site Scripting Vulnerability

    Cross-site scripting (XSS) vulnerability in Centreon 2.6.1 (fixed in Centreon 18.10.0 and Centreon web 2.8.27).

    centreon/centreon Packagist