Approved changes feed: RSS · Atom

cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCentreon (e01a1192-018f-55df-98f2-b9707fac306d)
ProductCentreon Web (6ea182ce-c62a-5034-9e78-8680bc7a3c53)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/centreon/centreon purl2cpe 2026-06-01 10:10:56.356519
pkg:rpm/opensuse/centreon-web purl2cpe 2026-06-01 10:10:56.356520

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-2751 vulnerable 2026-06-08 07:55:17.472767 Blind SQL Injection
HIGH (8.3)
Blind SQL Injection via unsanitized array keys in Service Dependencies deletion. Vulnerability in Centreon Centreon Web on Central Server on Linux (Service Dependencies modules) allows Blind SQL Injection.This issue affects Centreon Web on Central Server before 25.10.8, 24.10.20, 24.04.24.
Published: 2026-02-27T13:33:44.787Z
Updated: 2026-02-27T14:26:21.910Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8459 vulnerable 2026-06-08 07:45:20.596846 A user with low privileges can inject XSS in the Monitoring Recurrent downtimes page
HIGH (7.7)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Monitoring recurrent downtime scheduler modules) allows Stored XSS.This issue affects Infra Monitoring: from 24.10.0 before 24.10.13, from 24.04.0 before 24.04.18, from 23.10.0 before 23.10.28.
Published: 2025-10-14T17:11:30.565Z
Updated: 2025-10-15T13:13:21.944Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8430 vulnerable 2026-06-08 07:45:20.133268 A user with elevated privileges can inject XSS in the Commands Connectors configuration configuration page
MEDIUM (6.8)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Commands Connectors configuration modules) allows Stored XSS by users with elevated privileges. This issue affects Infra Monitoring: from 24.10.0 before 24.10.13, from 24.04.0 before 24.04.18, from 23.10.0 before 23.10.28.
Published: 2025-10-14T16:54:43.948Z
Updated: 2025-10-15T13:13:42.544Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8429 vulnerable 2026-06-08 07:45:20.132850 A user with elevated privileges can inject XSS in the ACL Action access configuration page
MEDIUM (6.8)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (ACL Action access configuration modules) allows Stored XSS by users with elevated privileges. This issue affects Infra Monitoring: from 24.10.0 before 24.10.13, from 24.04.0 before 24.04.18, from 23.10.0 before 23.10.28.
Published: 2025-10-14T15:29:56.095Z
Updated: 2025-10-15T13:14:03.171Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8428 vulnerable 2026-06-08 07:45:20.132453 XSS found in the HTTP loader widget
MEDIUM (6.8)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (HTTP Loader widget modules) allows Stored XSS.This issue affects Infra Monitoring: from 24.10.0 before 24.10.13, from 24.04.0 before 24.04.18, from 23.10.0 before 23.10.28.
Published: 2025-10-14T14:22:03.098Z
Updated: 2025-10-14T16:01:54.470Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6791 vulnerable 2026-06-08 07:43:16.475857 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5965 vulnerable 2026-06-08 07:37:26.151211 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5946 vulnerable 2026-06-08 07:37:26.124229 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54893 vulnerable 2026-06-08 07:33:13.538054 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54892 vulnerable 2026-06-08 07:33:13.537652 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54891 vulnerable 2026-06-08 07:33:13.537345 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54890 vulnerable 2026-06-08 07:33:13.536783 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54889 vulnerable 2026-06-08 07:33:13.536390 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4650 vulnerable 2026-06-08 07:29:17.007487 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4649 vulnerable 2026-06-08 07:29:17.002539 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4648 vulnerable 2026-06-08 07:29:17.002073 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4647 vulnerable 2026-06-08 07:29:17.001495 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4646 vulnerable 2026-06-08 07:29:17.000768 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3872 vulnerable 2026-06-08 07:23:10.052280 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13056 vulnerable 2026-06-08 07:04:31.496403 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12519 vulnerable 2026-06-08 07:04:30.367126 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12513 vulnerable 2026-06-08 07:04:30.352431 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10023 vulnerable 2026-06-08 07:02:26.164477 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5725 vulnerable 2026-06-08 06:56:17.118479 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5723 vulnerable 2026-06-08 06:56:17.116233 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-55573 vulnerable 2026-06-08 06:54:17.084839 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-53923 vulnerable 2026-06-08 06:54:15.697059 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39841 vulnerable 2026-06-08 06:41:51.725407 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33854 vulnerable 2026-06-08 06:37:32.207176 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33853 vulnerable 2026-06-08 06:37:32.206809 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33852 vulnerable 2026-06-08 06:37:32.206388 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32501 vulnerable 2026-06-08 06:35:33.232358 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23119 vulnerable 2026-06-08 06:29:36.334348 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23118 vulnerable 2026-06-08 06:29:36.333740 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23117 vulnerable 2026-06-08 06:29:36.333143 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23116 vulnerable 2026-06-08 06:29:36.332388 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23115 vulnerable 2026-06-08 06:29:36.330726 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0637 vulnerable 2026-06-08 06:22:01.544835 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51633 vulnerable 2026-06-08 06:17:53.644453 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17108 vulnerable 2026-06-08 05:13:09.944953 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17107 vulnerable 2026-06-08 05:13:09.944617 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17106 vulnerable 2026-06-08 05:13:09.944263 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17105 vulnerable 2026-06-08 05:13:09.943895 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-16405 vulnerable 2026-06-08 05:13:08.427817 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15300 vulnerable 2026-06-08 05:12:57.194081 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15299 vulnerable 2026-06-08 05:12:57.193688 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15298 vulnerable 2026-06-08 05:12:57.193281 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-21023 vulnerable 2026-06-08 05:11:28.335865 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-21022 vulnerable 2026-06-08 05:11:28.335502 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-21021 vulnerable 2026-06-08 05:11:28.335045 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-21020 vulnerable 2026-06-08 05:11:28.334617 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5967 vulnerable 2026-06-08 05:02:58.857932 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.