CVE-2020-13628

CVE-2020-13628 is a cross-site scripting (XSS) vulnerability in Centreon’s web widgets. The flaw allows remote attackers to inject arbitrary script or HTML via the widgetId parameter in host-monitoring/src/toolbar.php. Affected components and fixes are documented across multiple Centreon widgets:...

CVE-2020-10946

CVE-2020-10946 is a cross-site scripting (XSS) vulnerability affecting Centreon widgets: host-monitoring, service-monitoring, and tactical-overview. The issue arises from insufficient input handling in the page parameter (or widgetId in toolbar.php), allowing remote attackers to inject arbitrary ...

CVE-2020-13627

CVE-2020-13627 is a cross-site scripting (XSS) vulnerability in Centreon widgets where an attacker could inject arbitrary script via the widgetId parameter in service-monitoring/src/index.php. Affected components include Centreon host-monitoring widget, service-monitoring widget, and tactical-ove...