Known Vulnerabilities for products from Centreon
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Centreon".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2025-54893 json | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra M... | Not Provided | 2025-10-14 | 2026-10-08 |
| CVE-2025-54892 json | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra M... | Not Provided | 2025-10-14 | 2026-10-08 |
| CVE-2025-54891 json | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra M... | Not Provided | 2025-10-14 | 2026-10-08 |
| CVE-2025-54890 json | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra M... | Not Provided | 2025-12-22 | 2026-10-19 |
| CVE-2025-54889 json | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra M... | Not Provided | 2025-10-14 | 2026-10-08 |
| CVE-2025-15029 json | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon Infra Monitori... | Not Provided | 2026-01-05 | 2026-10-07 |
| CVE-2025-15026 json | Missing Authentication for Critical Function vulnerability in Centreon Infra Monitoring centreon-awie (Awie import module) al... | Not Provided | 2026-01-05 | 2026-10-07 |
| CVE-2025-12514 json | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon Infra Monitori... | Not Provided | 2025-12-22 | 2026-10-19 |
| CVE-2025-10023 json | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra M... | Not Provided | 2025-10-27 | 2026-10-08 |
| CVE-2025-8460 json | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra M... | Not Provided | 2025-12-22 | 2026-10-19 |
| CVE-2025-8459 json | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra M... | Not Provided | 2025-10-14 | 2026-10-08 |
| CVE-2025-8430 json | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra M... | Not Provided | 2025-10-14 | 2026-10-08 |
| CVE-2025-8429 json | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra M... | Not Provided | 2025-10-14 | 2026-10-08 |
| CVE-2025-8428 json | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra M... | Not Provided | 2025-10-14 | 2026-10-08 |
| CVE-2025-5965 json | In the backup parameters, a user with high privilege is able to concatenate custom instructions to the backup setup. Improper... | Not Provided | 2026-01-05 | 2026-10-07 |
| CVE-2025-5946 json | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Centreon Infra Mo... | Not Provided | 2025-10-14 | 2026-10-08 |
| CVE-2022-42429 json | This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is re... | 8.8 - HIGH | 2023-03-29 | 2023-04-05 |
| CVE-2022-42428 json | This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is re... | 8.8 - HIGH | 2023-03-29 | 2023-04-07 |
| CVE-2022-42427 json | This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is re... | 8.8 - HIGH | 2023-03-29 | 2023-04-06 |
| CVE-2022-42426 json | This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is re... | 8.8 - HIGH | 2023-03-29 | 2023-04-06 |
Known software with vulnerabilities from Centreon
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Centreon | Centreon | - |
| Application | Centreon | Centreon Host-monitoring Widget | 1.6.4 |
| Application | Centreon | Centreon Service-monitoring Widget | 1.6.4 |
| Application | Centreon | Centreon Tactical-overview Widget | 1.0.3 |
| Application | Centreon | Centreon Vm | 19.04.2 |
| Application | Centreon | Centreon Web | 18.10.0 |
| Application | Centreon | Widget-host-monitoring | 1.4.0 |