| Max CVSS | 7.2 | Min CVSS | 6.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2019-15298 | 6.5 |
A problem was found in Centreon Web through 19.04.3. An authenticated command injection is present in the page include/configuration/configObject/traps-mibs/formMibs.php. This page is called from the Centreon administration interface. This is the mib
|
24-08-2020 - 17:37 | 27-11-2019 - 14:15 | |
| CVE-2019-16406 | 7.2 |
Centreon Web 19.04.4 has weak permissions within the OVA (aka VMware virtual machine) and OVF (aka VirtualBox virtual machine) files, allowing attackers to gain privileges via a Trojan horse Centreon-autodisco executable file that is launched by cron
|
06-03-2020 - 20:15 | 21-11-2019 - 18:15 | |
| CVE-2019-15299 | 6.5 |
An issue was discovered in Centreon Web through 19.04.3. When a user changes his password on his profile page, the contact_autologin_key field in the database becomes blank when it should be NULL. This makes it possible to partially bypass authentica
|
28-02-2020 - 01:36 | 24-02-2020 - 13:15 | |
| CVE-2019-15300 | 6.5 |
A problem was found in Centreon Web through 19.04.3. An authenticated SQL injection is present in the page include/Administration/parameters/ldap/xml/ldap_host.php. The arId parameter is not properly filtered before being passed to the SQL query.
|
09-12-2019 - 19:10 | 27-11-2019 - 14:15 |