CVE-2020-10946

🗓️ 27 May 2020 15:12:32Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 42 Views🌐 WEB

CVE-2020-10946 Cross-site scripting vulnerability in Centreon widget

Reporter	Title	Published	Views	Family All 18
Circl	CVE-2020-10946	27 May 202020:55	–	circl
CNVD	Centreon host-monitoring widget, service-monitoring widget and tactical-overview widget cross-site scripting vulnerabilities (CNVD-2021-28002)	28 May 202000:00	–	cnvd
Check Point Advisories	Cross-Site Scripting Scanning Attempt (CVE-2015-4661; CVE-2019-16385; CVE-2019-9167; CVE-2020-10946; CVE-2020-12261; CVE-2020-13228; CVE-2020-13627; CVE-2020-13628; CVE-2020-14953; CVE-2021-21801; CVE-2021-25080; CVE-2022-25305; CVE-2022-28102)	22 Mar 201600:00	–	checkpoint_advisories
Cvelist	CVE-2020-10946	27 May 202015:12	–	cvelist
EUVD	EUVD-2020-3350	7 Oct 202500:30	–	euvd
EUVD	EUVD-2020-5870	7 Oct 202500:30	–	euvd
EUVD	EUVD-2020-5871	7 Oct 202500:30	–	euvd
NVD	CVE-2020-10946	27 May 202016:15	–	nvd
OSV	CVE-2020-10946	27 May 202016:15	–	osv
OSV	CVE-2020-13627	27 May 202016:15	–	osv

NVD

Node

centreon centreon_host-monitoring_widgetRange<1.6.4

OR

centreon centreon_host-monitoring_widgetRange18.10.0–18.10.3

OR

centreon centreon_host-monitoring_widgetRange19.0.0–19.0.1

OR

centreon centreon_host-monitoring_widgetRange19.04.0–19.04.3

Node

centreon centreon_tactical-overview_widgetRange<1.0.3

OR

centreon centreon_tactical-overview_widgetRange18.10.0–18.10.1

OR

centreon centreon_tactical-overview_widgetRange19.04.0–19.04.1

OR

centreon centreon_tactical-overview_widgetRange19.10.0–19.10.1

Node

centreon centreon_service-monitoring_widgetRange<1.6.4

OR

centreon centreon_service-monitoring_widgetRange18.10.0–18.10.5

OR

centreon centreon_service-monitoring_widgetRange19.04.0–19.04.3

OR

centreon centreon_service-monitoring_widgetRange19.10.0–19.10.2

Source	Link
sysdream	www.sysdream.com/news/lab/2020-05-13-cve-2020-10946-several-cross-site-scripting-xss-vulnerabilities-in-centreon/

Parameter	Position	Path	Description	CWE
page	query param	service-monitoring/src/index.php	XSS via the page parameter in service-monitoring/src/index.php used by Centreon widgets	CWE-79

21 Nov 2024 04:56Current

5.9Medium risk

Vulners AI Score5.9

CVSS 24.3

CVSS 3.16.1

EPSS0.00088

cve-2020-10946 cross-site scripting xss vulnerability centreon widgets security nvd