Filtered by vendor Centreon Subscriptions
Filtered by product Centreon Subscriptions
Total 83 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2018-11588 1 Centreon 2 Centreon, Centreon Web 2024-11-21 N/A
Centreon 3.4.6 including Centreon Web 2.8.23 is vulnerable to an authenticated user injecting a payload into the username or command description, resulting in stored XSS. This is related to www/include/core/menu/menu.php and www/include/configuration/configObject/command/formArguments.php.
CVE-2018-11587 1 Centreon 2 Centreon, Centreon Web 2024-11-21 N/A
There is Remote Code Execution in Centreon 3.4.6 including Centreon Web 2.8.23 via the RPN value in the Virtual Metric form in centreonGraph.class.php.
CVE-2024-45754 1 Centreon 1 Centreon 2024-10-15 7.2 High
An issue was discovered in the centreon-bi-server component in Centreon BI Server 24.04.x before 24.04.3, 23.10.x before 23.10.8, 23.04.x before 23.04.11, and 22.10.x before 22.10.11. SQL injection can occur in the listing of configured reporting jobs. Exploitation is only accessible to authenticated users with high-privileged access.