Centreon Web 2.8.23
Approved changes feed: RSS · Atom
cpe:2.3:a:centreon:centreon_web:2.8.23:*:*:*:*:*:*:*
part: a version: 2.8.23 update: *
| Vendor | Centreon (e01a1192-018f-55df-98f2-b9707fac306d) |
|---|---|
| Product | Centreon Web (6ea182ce-c62a-5034-9e78-8680bc7a3c53) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/centreon/centreon |
purl2cpe | 2026-06-01 10:10:56.357327 |
pkg:rpm/opensuse/centreon-web |
purl2cpe | 2026-06-01 10:10:56.357329 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-11589 |
vulnerable | 2026-06-03 14:38:01.718372 |
Details available
Multiple SQL injection vulnerabilities in Centreon 3.4.6 including Centreon Web 2.8.23 allow attacks via the searchU parameter in viewLogs.php, the id parameter in GetXmlHost.php, the chartId parameter in ExportCSVServiceData.php, the searchCurve parameter in listComponentTemplates.php, or the host_id parameter in makeXML_ListMetrics.php.
Published: 2018-06-25T18:00:00.000Z
Updated: 2024-08-05T08:10:14.875Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11588 |
vulnerable | 2026-06-03 14:38:01.717953 |
Details available
Centreon 3.4.6 including Centreon Web 2.8.23 is vulnerable to an authenticated user injecting a payload into the username or command description, resulting in stored XSS. This is related to www/include/core/menu/menu.php and www/include/configuration/configObject/command/formArguments.php.
Published: 2018-06-25T18:00:00.000Z
Updated: 2024-08-05T08:10:14.850Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11587 |
vulnerable | 2026-06-03 14:38:01.717492 |
Details available
There is Remote Code Execution in Centreon 3.4.6 including Centreon Web 2.8.23 via the RPN value in the Virtual Metric form in centreonGraph.class.php.
Published: 2018-06-25T18:00:00.000Z
Updated: 2024-08-05T08:10:14.638Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.