Vulnerabilidades en Centreon
55 resultadosCVE-2025-54891MEDIUMA user with elevated privileges can inject XSS in the ACL Resource Access configuration pageEPSS 0.3%CVE-2025-13050MEDIUMBroken Function Level Authorization — `postcommand.php` allows execution of poller post-restart commands by non-admin usersEPSS 0.3%CVE-2025-8459HIGHA user with low privileges can inject XSS in the Monitoring Recurrent downtimes pageEPSS 0.3%CVE-2025-8428MEDIUMXSS found in the HTTP loader widgetEPSS 0.3%CVE-2025-8460MEDIUMA user with elevated privileges can inject XSS in the Notification rules configuration pageEPSS 0.2%CVE-2025-12519MEDIUMInformation disclosure on Administration parameters API endpointEPSS 0.2%CVE-2025-12523MEDIUMBroken Object Level Authorization in Users Configuration Endpoint (/centreon/api/latest/configuration/users) – Sensitive Information DisclosureEPSS 0.2%CVE-2025-54893MEDIUMA user with elevated privileges can inject XSS in the Hosts templates configuration pageEPSS 0.2%CVE-2025-8429MEDIUMA user with elevated privileges can inject XSS in the ACL Action access configuration pageEPSS 0.2%CVE-2025-10023MEDIUMA user with elevated privileges can inject XSS in the Services Meta-services configuration pageEPSS 0.2%CVE-2025-8430MEDIUMA user with elevated privileges can inject XSS in the Commands Connectors configuration configuration pageEPSS 0.2%CVE-2025-54890MEDIUMA user with elevated privileges can inject XSS in the Hostgroups configuration pageEPSS 0.2%CVE-2025-12511MEDIUMA user with elevated privileges can inject XSS in the DSM Administration’s Extensions configuration pageEPSS 0.2%CVE-2025-12513MEDIUMA user with elevated privileges can inject XSS in the Hosts configuration parameters pageEPSS 0.2%CVE-2025-13056MEDIUMA user with elevated privileges can inject XSS in the Administration ACL Menus configuration pageEPSS 0.2%