Approved changes feed: RSS · Atom

cpe:2.3:a:centreon:dynamic_service_management:25.10.0:*:*:*:*:*:*:*

part: a version: 25.10.0 update: *

VendorCentreon (e01a1192-018f-55df-98f2-b9707fac306d)
ProductDynamic Service Management (82829de4-eaee-5705-b556-166712ec6914)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-12511 vulnerable 2026-06-03 14:58:44.471612 A user with elevated privileges can inject XSS in the DSM Administration’s Extensions configuration page
MEDIUM (6.8)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (DSM extenstio configuration modules) allows Stored XSS to user with elevated privileges. This issue affects Infra Monitoring: from 25.10.0 before 25.10.1, from 24.10.0 before 24.10.4, from 24.04.0 before 24.04.8.
Published: 2026-01-05T14:05:52.794Z
Updated: 2026-01-08T15:40:12.515Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.