Every CVE whose affected-product data names Merethis Centreon, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (7)
CVE-2014-3829 — CVSS 10.0 (critical): displayServiceStatus.php in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allows remote attackers to…
CVE-2009-4368 — CVSS 10.0 (critical): Multiple unspecified vulnerabilities in Centreon before 2.1.4 have unknown impact and attack vectors in the (1) ping tool, (2) traceroute…
CVE-2014-3828 — CVSS 10.0 (critical): Multiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allow remote…
CVE-2010-1301 — CVSS 7.5 (high): SQL injection vulnerability in main.php in Centreon 2.1.5 allows remote attackers to execute arbitrary SQL commands via the host_id…
CVE-2011-4431 — CVSS 6.5 (medium): Directory traversal vulnerability in main.php in Merethis Centreon before 2.3.2 allows remote authenticated users to execute arbitrary…
CVE-2012-5967 — CVSS 6.5 (medium): SQL injection vulnerability in menuXML.php in Centreon 2.3.3 through 2.3.9-4 (fixed in Centreon web 2.6.0) allows remote authenticated…
CVE-2011-4432 — CVSS 5.0 (medium): www/include/configuration/nconfigObject/contact/DB-Func.php in Merethis Centreon before 2.3.2 does not use a salt during calculation of a…