← Back

Centreon

centreon

124 CVEs • 11 products

Products (11)

Click to collapse
Toggle
Centreon
centreon
59 CVEs
Centreon Web
centreon_web
56 CVEs
Centreon Host Monitoring Widget
centreon_host-monitoring_widget
3 CVEs
Centreon Tactical Overview Widget
centreon_tactical-overview_widget
3 CVEs
Centreon Service Monitoring Widget
centreon_service-monitoring_widget
3 CVEs
Open Tickets
open_tickets
3 CVEs
Centreon Vm
centreon_vm
2 CVEs
Awie
awie
2 CVEs
Widget Host Monitoring
widget-host-monitoring
1 CVE
Dynamic Service Management
dynamic_service_management
1 CVE
Web
web
1 CVE

CVEs (124)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2008-1179
1Centreon
1Centreon
Apr 23, 2026
Mar 6, 2008
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in include/common/javascript/color_picker.php in Centreon 1.4.2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) tit...Show more
Multiple cross-site scripting (XSS) vulnerabilities in include/common/javascript/color_picker.php in Centreon 1.4.2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) title parameters. NOTE: some of these details are obtained from third party information.Show less
CVE-2008-1178
1Centreon
1Centreon
Apr 23, 2026
Mar 6, 2008
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Directory traversal vulnerability in include/doc/index.php in Centreon 1.4.2.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter, a different vector than CVE-2008-1119.
CVE-2008-1119
1Centreon
1Centreon
Apr 23, 2026
Mar 3, 2008
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Directory traversal vulnerability in include/doc/get_image.php in Centreon 1.4.2.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the img parameter.
CVE-2007-6485
1Centreon
1Centreon
Apr 23, 2026
Dec 20, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple PHP remote file inclusion vulnerabilities in Centreon 1.4.1 (aka Oreon 1.4) allow remote attackers to execute arbitrary PHP code via a URL in the fileOreonConf parameter to (1) MakeXML.php or (2) MakeXML4statusC...Show more
Multiple PHP remote file inclusion vulnerabilities in Centreon 1.4.1 (aka Oreon 1.4) allow remote attackers to execute arbitrary PHP code via a URL in the fileOreonConf parameter to (1) MakeXML.php or (2) MakeXML4statusCounter.php in include/monitoring/engine/.Show less