Centreon Web@24.04.0 Security Vulnerabilities and Issues — Centreon Web@24.04.0 CVE List

Lucene search

CentreonCentreon Web24.04.0

8 matches found

CVE•added 2024/08/23 5:15 p.m.•52 views

CVE-2024-33852

A SQL Injection vulnerability exists in the Downtime component in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x before 22.10.23.

9.1CVSS8.4AI score0.00185EPSS

CVE•added 2024/08/21 5:15 p.m.•48 views

CVE-2024-5725

Centreon initCurveList SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the initCurveList function....

8.8CVSS9.2AI score0.30345EPSS

CVE•added 2025/01/23 10:15 p.m.•47 views

CVE-2024-53923

An issue was discovered in Centreon Web 24.10.x before 24.10.3, 24.04.x before 24.04.9, 23.10.x before 23.10.19, 23.04.x before 23.04.24. A user with high privileges is able to achieve SQL injection in the form to upload media.

9.1CVSS8AI score0.001EPSS

CVE•added 2025/01/23 11:15 p.m.•47 views

CVE-2024-55573

An issue was discovered in Centreon centreon-web 24.10.x before 24.10.3, 24.04.x before 24.04.9, 23.10.x before 23.10.19, 23.04.x before 23.04.24. A user with high privileges is able to inject SQL into the form used to create virtual metrics.

9.1CVSS7.7AI score0.00151EPSS

CVE•added 2024/08/23 5:15 p.m.•44 views

CVE-2024-32501

A SQL Injection vulnerability exists in the updateServiceHost functionality in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x before 22.10.23.

9.8CVSS8.4AI score0.01741EPSS

CVE•added 2024/08/23 5:15 p.m.•40 views

CVE-2024-39841

A SQL Injection vulnerability exists in the service configuration functionality in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x before 22.10.23.

8.8CVSS8.4AI score0.00225EPSS

CVE•added 2024/08/23 5:15 p.m.•38 views

CVE-2024-33853

A SQL Injection vulnerability exists in the Timeperiod component in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x before 22.10.23.

9.1CVSS8.4AI score0.00186EPSS

CVE•added 2024/08/23 5:15 p.m.•37 views

CVE-2024-33854

A SQL Injection vulnerability exists in the Graph Template component in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x before 22.10.23.

9.1CVSS8.4AI score0.00185EPSS