Multiple vulnerabilities have been discovered in Centreon products that allow an attacker to perform remote arbitrary code execution, SQL injection (SQLi), and remote indirect code injection (XSS).
| Vendor | Product | Versions |
|---|---|---|
| centreon | centreon products | Anomaly Detection versions prior to 24.10.10 and 25.10.5, Auto Discovery versions prior to 24.10.13 and 25.10.5, AWIE versions prior to 24.10.6 and 25.10.6, BAM versions prior to 24.10.14 and 25.10.5, DSM versions prior to 24.10.6 and 25.10.3, License Manager versions prior to 24.10.9 and 25.10.4, MAP versions prior to 24.10.17 and 25.10.5, MBI versions prior to 24.04.15, 24.10.17 and 25.10.5, Open Tickets versions prior to 24.10.11 and 25.10.6 |
