Vendor
Centreon
131 known vulnerabilities in products by Centreon, 0 of them actively exploited (CISA KEV).
Key figures
131
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
22
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-15029 | An unauthenticated user is able to introduce SQL Injection using the Awie export module | 9.8 | |
| Critical | CVE-2024-32501 | Centreon Infra Monitoring: SQL Injection | 9.8 | |
| High | CVE-2024-5725 | Centreon initCurveList SQL Injection Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-0637 | Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-5723 | Centreon updateServiceHost SQL Injection Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2025-5965 | RCE via the backup feature available only to user with high privilege | 7.2 | |
| High | CVE-2025-5946 | RCE via the poller reload feature available only to user with high privilege | 7.2 | |
| High | CVE-2019-13024 | Centreon: security vulnerability | 8.8 | |
| High | CVE-2021-37557 | Centreon: SQL Injection | 8.8 | |
| High | CVE-2021-37556 | Centreon: SQL Injection | 8.8 | |
| High | CVE-2019-15298 | Centreon Infra Monitoring: Command Injection | 8.8 | |
| High | CVE-2024-23115 | Centreon updateGroups SQL Injection Remote Code Execution Vulnerability | 7.2 | |
| High | CVE-2024-23118 | Centreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability | 7.2 | |
| High | CVE-2024-23117 | Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability | 7.2 | |
| High | CVE-2024-23116 | Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability | 7.2 | |
| High | CVE-2022-42424 | Centreon: SQL Injection | 7.2 | |
| High | CVE-2022-42429 | Centreon: SQL Injection | 7.2 | |
| High | CVE-2022-42425 | Centreon: SQL Injection | 7.2 | |
| High | CVE-2022-42427 | Centreon: SQL Injection | 7.2 | |
| High | CVE-2022-41142 | Centreon: SQL Injection | 7.2 | |
| Critical | CVE-2018-11587 | Centreon: Remote Code Execution | 9.8 | |
| High | CVE-2019-16405 | Centreon Infra Monitoring: Remote Code Execution | 7.2 | |
| High | CVE-2020-13252 | Centreon: security vulnerability | 8.8 | |
| High | CVE-2019-19699 | Centreon: Remote Code Execution | 7.2 | |
| High | CVE-2019-19487 | Centreon: Command Injection | 8.8 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 27sans-atrisk-mail,