Approved changes feed: RSS · Atom
cpe:2.3:a:centreon:centreon:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Centreon (e01a1192-018f-55df-98f2-b9707fac306d) |
|---|---|
| Product | Centreon (df868b4a-5b4d-57ce-b7fd-3c898153f558) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/centreon/centreon |
purl2cpe | 2026-06-01 10:10:56.307354 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-3872 |
vulnerable | 2026-06-08 07:23:10.051537 |
Privilege escalation by altering payload in contact form
HIGH (7.2)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon centreon-web (User configuration form modules) allows SQL Injection.
A user with high privileges is able to become administrator by intercepting the contact form request and altering its payload.
This issue affects Centreon: from 22.10.0 before 22.10.28, from 23.04.0 before 23.04.25, from 23.10.0 before 23.10.20, from 24.04.0 before 24.04.10, from 24.10.0 before 24.10.4.
Published: 2025-04-24T09:19:33.900Z
Updated: 2025-04-24T15:22:37.345Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5725 |
vulnerable | 2026-06-08 06:56:17.118432 |
Centreon initCurveList SQL Injection Remote Code Execution Vulnerability
HIGH (8.8)
Centreon initCurveList SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability.
The specific flaw exists within the initCurveList function. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the apache user. Was ZDI-CAN-22683.
Published: 2024-08-21T16:14:52.027Z
Updated: 2024-08-22T15:48:16.728Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5723 |
vulnerable | 2026-06-08 06:56:17.115439 |
Centreon updateServiceHost SQL Injection Remote Code Execution Vulnerability
HIGH (8.8)
Centreon updateServiceHost SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability.
The specific flaw exists within the updateServiceHost function. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the apache user. Was ZDI-CAN-23294.
Published: 2024-08-21T16:14:43.583Z
Updated: 2024-08-21T17:27:57.933Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39842 |
vulnerable | 2026-06-08 06:41:51.726808 |
Details available
A SQL injection vulnerability in Centreon 24.04.2 allows a remote high-privileged attacker to execute arbitrary SQL command via user massive changes inputs.
Published: 2024-09-23T00:00:00.000Z
Updated: 2024-09-23T18:58:21.141Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32501 |
vulnerable | 2026-06-08 06:35:33.231357 |
Details available
A SQL Injection vulnerability exists in the updateServiceHost functionality in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x before 22.10.23.
Published: 2024-08-23T00:00:00.000Z
Updated: 2024-08-27T14:57:21.452Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23119 |
vulnerable | 2026-06-08 06:29:36.334245 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23118 |
vulnerable | 2026-06-08 06:29:36.333702 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23118 |
not_vulnerable | 2026-06-08 06:29:36.333539 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23117 |
vulnerable | 2026-06-08 06:29:36.333001 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23116 |
vulnerable | 2026-06-08 06:29:36.332302 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23115 |
vulnerable | 2026-06-08 06:29:36.330003 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0637 |
vulnerable | 2026-06-08 06:22:01.544162 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51633 |
vulnerable | 2026-06-08 06:17:53.643508 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-42429 |
vulnerable | 2026-06-08 05:49:29.870519 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-42428 |
vulnerable | 2026-06-08 05:49:29.870121 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-42427 |
vulnerable | 2026-06-08 05:49:29.869815 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-42426 |
vulnerable | 2026-06-08 05:49:29.869497 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-42425 |
vulnerable | 2026-06-08 05:49:29.869056 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-42424 |
vulnerable | 2026-06-08 05:49:29.868542 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41142 |
vulnerable | 2026-06-08 05:48:29.939578 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3827 |
vulnerable | 2026-06-08 05:48:22.398025 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34872 |
vulnerable | 2026-06-08 05:46:03.742561 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34871 |
vulnerable | 2026-06-08 05:46:03.740932 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-37558 |
vulnerable | 2026-06-08 05:32:54.376329 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-37557 |
vulnerable | 2026-06-08 05:32:54.375799 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-37556 |
vulnerable | 2026-06-08 05:32:54.375265 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13252 |
vulnerable | 2026-06-08 05:18:00.408133 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10945 |
vulnerable | 2026-06-08 05:16:36.089817 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20327 |
vulnerable | 2026-06-08 05:13:40.417836 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19699 |
vulnerable | 2026-06-08 05:13:23.282890 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19487 |
vulnerable | 2026-06-08 05:13:22.985874 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19486 |
vulnerable | 2026-06-08 05:13:22.985470 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19484 |
vulnerable | 2026-06-08 05:13:22.984987 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-17647 |
vulnerable | 2026-06-08 05:13:10.909399 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-17646 |
vulnerable | 2026-06-08 05:13:10.908838 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-17645 |
vulnerable | 2026-06-08 05:13:10.908481 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-17644 |
vulnerable | 2026-06-08 05:13:10.908097 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-17643 |
vulnerable | 2026-06-08 05:13:10.907673 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-17642 |
vulnerable | 2026-06-08 05:13:10.907302 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-16195 |
vulnerable | 2026-06-08 05:13:07.880176 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-16194 |
vulnerable | 2026-06-08 05:13:07.879592 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-21024 |
vulnerable | 2026-06-08 05:11:28.337524 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19312 |
vulnerable | 2026-06-08 05:11:15.614981 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19311 |
vulnerable | 2026-06-08 05:11:15.614621 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19280 |
vulnerable | 2026-06-08 05:11:15.557666 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1561 |
vulnerable | 2026-06-08 05:06:25.841260 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1560 |
vulnerable | 2026-06-08 05:06:25.840868 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5967 |
vulnerable | 2026-06-08 05:02:58.857329 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-1179 |
vulnerable | 2026-06-08 04:50:19.434644 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-1178 |
vulnerable | 2026-06-08 04:50:19.434233 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-1119 |
vulnerable | 2026-06-08 04:50:18.927347 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.