Centreon Enterprise Server

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2014-3829 CRITICAL POC THREAT Emergency

displayServiceStatus.php in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allows remote attackers to execute arbitrary commands via shell metacharacters in the (1). Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 86.2%.

RCE PHP Code Injection Centreon Centreon Enterprise Server

NVD GitHub Exploit-DB

CVSS 2.0

10.0

EPSS

86.2%

Threat

6.1

CVE-2014-3828 CRITICAL POC THREAT Emergency

Multiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allow remote attackers to execute arbitrary SQL commands via (1) the index_id. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 78.6%.

PHP SQLi Centreon Centreon Enterprise Server

NVD GitHub Exploit-DB

CVSS 2.0

10.0

EPSS

78.6%

Threat

5.9

CVE-2014-3829

EPSS 86% 6.1 CVSS 10.0

CRITICAL POC THREAT Emergency

RCE PHP Code Injection +2

NVD GitHub Exploit-DB

CVE-2014-3828

EPSS 79% 5.9 CVSS 10.0

CRITICAL POC THREAT Emergency

PHP SQLi Centreon +1

NVD GitHub Exploit-DB