Merethis

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2014-3829 Oct 23, 01:55 CRITICAL POC THREAT Emergency

displayServiceStatus.php in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allows remote attackers to execute arbitrary commands via shell metacharacters in the (1). Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 86.2%.

PHP RCE Code Injection Centreon Centreon Enterprise Server +1

NVD GitHub Exploit-DB

CVSS 2.0

10.0

EPSS

86.2%

Threat

6.1

CVE-2014-3828 Oct 23, 01:55 CRITICAL POC THREAT Emergency

Multiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allow remote attackers to execute arbitrary SQL commands via (1) the index_id. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 78.6%.

PHP SQLi Centreon Centreon Enterprise Server Merethis

NVD GitHub Exploit-DB

CVSS 2.0

10.0

EPSS

78.6%

Threat

5.9

CVE-2012-5967 Dec 19, 11:55 MEDIUM POC This Month

SQL injection vulnerability in menuXML.php in Centreon 2.3.3 through 2.3.9-4 (fixed in Centreon web 2.6.0) allows remote authenticated users to execute arbitrary SQL commands via the menu parameter. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Centreon Merethis

NVD GitHub Exploit-DB

CVSS 2.0

6.5

EPSS

0.2%

CVE-2014-3829

EPSS 86% 6.1 CVSS 10.0

CRITICAL POC THREAT Emergency

PHP RCE Code Injection +3

NVD GitHub Exploit-DB

CVE-2014-3828

EPSS 79% 5.9 CVSS 10.0

CRITICAL POC THREAT Emergency

PHP SQLi Centreon +2

NVD GitHub Exploit-DB

CVE-2012-5967

EPSS 0% CVSS 6.5

MEDIUM POC This Month

PHP SQLi Centreon +1

NVD GitHub Exploit-DB