Vulnerability Database

308,926

Total vulnerabilities in the database

CVE-2025-6791

In the monitoring event logs page, it is possible to alter the http request to insert a reflect payload in the DB. Caused by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon web (Monitoring event logs modules) allows SQL Injection.This issue affects web: 24.10.0, 24.04.0, 23.10.0.

  • Published: Aug 22, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2025-6791
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.8
  • AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWEs:

OWASP TOP 10:

Software From Fixed in
centreon / centreon_web 23.10.0 23.10.26
centreon / centreon_web 24.04.0 24.04.16
centreon / centreon_web 24.10.0 24.10.9