Known vulnerabilities in Centreon 2.8.11

Vendor: Centreon
Software: Centreon
Version: 2.8.11
Software CPE: cpe:2.3:a:centreon:centreon:*:*:*:*:*:*:*:*
Total vulnerabilities: 22
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Centreon version 2.8.11 Centreon 2.8.11 is affected by 22 vulnerabilities: 11 high, 11 low Critical High Medium Low

Vulnerabilities (22)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU53627 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
2.8.38 27.05.2021 SB2021052721
#VU53626 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
2.8.38 27.05.2021 SB2021052721
#VU53625 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
2.8.38 27.05.2021 SB2021052721
#VU53624 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 High
No
No
2.8.38 27.05.2021 SB2021052721
#VU53623 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 High
No
No
2.8.38 27.05.2021 SB2021052721
#VU53622 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 High
No
No
2.8.38 27.05.2021 SB2021052721
#VU53621 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 High
No
No
2.8.38 27.05.2021 SB2021052721
#VU52836 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 High
No
No
2.8.37 04.05.2021 SB2021050405
#VU52835 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 High
No
No
2.8.37 04.05.2021 SB2021050405
#VU52834 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 High
No
No
2.8.37 04.05.2021 SB2021050405
#VU52833 - Cross-Site Request Forgery (CSRF)
CWE-352 Low
No
No
2.8.37 04.05.2021 SB2021050405
#VU50897 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
2.8.36, 19.10.20 23.02.2021 SB2021022321
#VU50896 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-23369
CWE-94 High
No
No
2.8.36, 19.10.20 23.02.2021 SB2021022320
SB2021022321
SB2021070402
and 10 more
#VU50894 - Exposure of sensitive information to an unauthorized actor
CWE-200 Low
No
No
2.8.36, 19.10.20 23.02.2021 SB2021022321
#VU50893 - Insufficient Session Expiration
CWE-613 Low
No
No
2.8.36, 19.10.20 23.02.2021 SB2021022321
#VU50892 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
2.8.36, 19.10.20 23.02.2021 SB2021022321
#VU50891 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-22425
CWE-79 Low
No
No
2.8.36, 19.10.20, 20.04.10, 20.10.4 23.02.2021 SB2021022321
#VU23101 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16195
CWE-79 Low
No
No
2.8.30, 18.10.8, 19.04.5 29.11.2019 SB2019112907
#VU23100 - Command injection
CVE-2019-15298
CWE-77 High
No
No
19.04.5 29.11.2019 SB2019112908
#VU23099 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-15300
CWE-89 High
No
No
2.8.30, 19.04.5, 19.10.2 29.11.2019 SB2019112907


Showing elements 1 - 20 out of 22