Infra Monitoring
Approved changes feed: RSS · Atom
cpe:2.3:a:centreon:infra_monitoring:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Centreon (e01a1192-018f-55df-98f2-b9707fac306d) |
|---|---|
| Product | Infra Monitoring (4d8bff4c-ec41-5088-aab9-bac3620df942) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-14453 |
vulnerable | 2026-07-29 00:26:17.022719 |
A user with low privileges can inject SSTI templates that can lead to RCE in open-tickets
CRITICAL (9.6)
This vulnerability is a critical Server-Side Template Injection (SSTI) in Centreon's centreon-open-tickets module that leads to Remote Code Execution. The message_confirm field is stored without sanitization and rendered via Smarty with no security policy enabled, allowing any authenticated user, to inject and execute arbitrary code on the server. This results in disclosure of environment secrets and could impact platform availability of Centreon Infra Monitoring product.
Published: 2026-07-13T08:19:13.094Z
Updated: 2026-07-13T13:54:29.853Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8460 |
vulnerable | 2026-06-08 07:45:20.597254 |
A user with elevated privileges can inject XSS in the Notification rules configuration page
MEDIUM (6.8)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Notification rules, Open tickets module)
allows Stored
XSS by users with elevated privileges.This issue affects Infra Monitoring: from 24.10.0 before 24.10.5, from 24.04.0 before 24.04.5, from 23.10.0 before 23.10.4.
Published: 2025-12-22T10:55:58.934Z
Updated: 2026-01-05T09:51:56.936Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8459 |
vulnerable | 2026-06-08 07:45:20.596667 |
A user with low privileges can inject XSS in the Monitoring Recurrent downtimes page
HIGH (7.7)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Monitoring recurrent downtime scheduler modules) allows Stored XSS.This issue affects Infra Monitoring: from 24.10.0 before 24.10.13, from 24.04.0 before 24.04.18, from 23.10.0 before 23.10.28.
Published: 2025-10-14T17:11:30.565Z
Updated: 2025-10-15T13:13:21.944Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8432 |
vulnerable | 2026-06-08 07:45:20.136388 |
CentreonBI user account on the MBI server can execute commands as root by modifying script runned by the CRON
HIGH (8.4)
Incorrect Default Permissions vulnerability in Centreon Infra Monitoring (MBI modules) allows Embedding Scripts within Scripts by CentreonBI user account on the MBI server This issue affects Infra Monitoring: from 24.10.0 before 24.10.6, from 24.04.0 before 24.04.9, from 23.10.0 before 23.10.15.
Published: 2025-10-27T10:08:33.662Z
Updated: 2025-10-30T13:51:12.045Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8430 |
vulnerable | 2026-06-08 07:45:20.133234 |
A user with elevated privileges can inject XSS in the Commands Connectors configuration configuration page
MEDIUM (6.8)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Commands Connectors configuration modules) allows Stored
XSS by users with elevated privileges.
This issue affects Infra Monitoring: from 24.10.0 before 24.10.13, from 24.04.0 before 24.04.18, from 23.10.0 before 23.10.28.
Published: 2025-10-14T16:54:43.948Z
Updated: 2025-10-15T13:13:42.544Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8429 |
vulnerable | 2026-06-08 07:45:20.132810 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8428 |
vulnerable | 2026-06-08 07:45:20.131591 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5965 |
vulnerable | 2026-06-08 07:37:26.151170 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5946 |
vulnerable | 2026-06-08 07:37:26.123242 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54893 |
vulnerable | 2026-06-08 07:33:13.538021 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54892 |
vulnerable | 2026-06-08 07:33:13.537621 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54891 |
vulnerable | 2026-06-08 07:33:13.537204 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54890 |
vulnerable | 2026-06-08 07:33:13.536742 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54889 |
vulnerable | 2026-06-08 07:33:13.535581 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15029 |
vulnerable | 2026-06-08 07:06:35.575594 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15026 |
vulnerable | 2026-06-08 07:06:35.574063 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13056 |
vulnerable | 2026-06-08 07:04:31.496356 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12519 |
vulnerable | 2026-06-08 07:04:30.367081 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12513 |
vulnerable | 2026-06-08 07:04:30.350998 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12511 |
vulnerable | 2026-06-08 07:04:30.348512 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10023 |
vulnerable | 2026-06-08 07:02:26.163576 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.