Skip to content

Centreon · weakness class

SQL Injection

52 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

likely to be exploited
16

Every one of the 52 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific fla…CVE-2022-41142Centreon · CVSS 7.2 · 85% likely

    CWE-89

  2. This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific fla…CVE-2022-42429Centreon · CVSS 7.2 · 76% likely

    CWE-89

  3. This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific fla…CVE-2022-42427Centreon · CVSS 7.2 · 76% likely

    CWE-89

  4. This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific fla…CVE-2022-42425Centreon · CVSS 7.2 · 76% likely

    CWE-89

  5. This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific fla…CVE-2022-42424Centreon · CVSS 7.2 · 76% likely

    CWE-89

  6. Centreon updateDirectory SQL Injection Remote Code Execution VulnerabilityCVE-2024-0637Centreon · CVSS 8.8 · 72% likely

    CWE-89

  7. Centreon updateGroups SQL Injection Remote Code Execution VulnerabilityCVE-2024-23115Centreon · CVSS 7.2 · 67% likely

    CWE-89

  8. Centreon updateContactHostCommands SQL Injection Remote Code Execution VulnerabilityCVE-2024-23118Centreon · CVSS 7.2 · 53% likely

    CWE-89

  9. Centreon updateContactServiceCommands SQL Injection Remote Code Execution VulnerabilityCVE-2024-23117Centreon · CVSS 7.2 · 53% likely

    CWE-89

  10. Centreon updateLCARelation SQL Injection Remote Code Execution VulnerabilityCVE-2024-23116Centreon · CVSS 7.2 · 53% likely

    CWE-89

  11. Centreon initCurveList SQL Injection Remote Code Execution VulnerabilityCVE-2024-5725Centreon · CVSS 8.8 · 47% likely

    CWE-89

  12. Centreon updateServiceHost SQL Injection Remote Code Execution VulnerabilityCVE-2024-5723Centreon · CVSS 8.8 · 41% likely

    CWE-89

  13. A SQL injection vulnerability in image generation in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-privileged) attackers to execute arbitrary…CVE-2021-37557Centreon · 27% likely

    CWE-89

  14. A SQL injection vulnerability in reporting export in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-privileged) attackers to execute arbitrary…CVE-2021-37556Centreon · 27% likely

    CWE-89

  15. A SQL Injection vulnerability exists in the updateServiceHost functionality in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x b…CVE-2024-32501Centreon · CVSS 9.8 · 19% likely

    CWE-89

  16. An unauthenticated user is able to introduce SQL Injection using the Awie export moduleCVE-2025-15029Centreon · CVSS 9.8 · 13% likely

    CWE-89

  17. SQL injection vulnerability in the isUserAdmin function in include/common/common-Func.php in Centreon (formerly Merethis Centreon) 2.5.4 and earlier (fixed in Centreon web 2.7.0)…CVE-2015-1560Centreon · 6.2% likely

    CWE-89

  18. SQL injection vulnerability in menuXML.php in Centreon 2.3.3 through 2.3.9-4 (fixed in Centreon web 2.6.0) allows remote authenticated users to execute arbitrary SQL commands via…CVE-2012-5967Centreon · 3.3% likely

    CWE-89

  19. This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific fla…CVE-2022-34871Centreon · CVSS 7.2 · 2.9% likely

    CWE-89

  20. This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific fla…CVE-2022-42428Centreon · CVSS 7.2 · 2.9% likely

    CWE-89

  21. This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific fla…CVE-2022-42426Centreon · CVSS 7.2 · 2.9% likely

    CWE-89

  22. Centreon 19.10-3.el7 is affected by a SQL injection vulnerability, where an authorized user is able to inject additional SQL queries to perform remote command execution.CVE-2020-22425Centreon · 2.6% likely

    CWE-89

  23. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Centreon. Authentication is required to exploit this vulnerability. The s…CVE-2022-34872Centreon · CVSS 6.5 · 2.2% likely

    CWE-89

  24. A SQL injection vulnerability in Centreon 24.04.2 allows a remote high-privileged attacker to execute arbitrary SQL command via create user form inputs.CVE-2024-39843Centreon · CVSS 6.7 · 2.1% likely

    CWE-89

  25. Centreon 3.4.x (fixed in Centreon 18.10.0 and Centreon web 2.8.28) allows SQL Injection via the main.php searchH parameter.CVE-2018-19271Centreon · 2.1% likely

    CWE-89

  26. A SQL injection vulnerability in a MediaWiki script in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote unauthenticated attackers to execute arbitrary SQL commands via…CVE-2021-37558Centreon · 2.1% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP

Updated AboutDevelopersSign in