Composer centreon/centreon has 27 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2024-0637 | Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability | high | 8.8 | <22.10.15 | 22.10.15 |
| CVE-2024-23115 | Centreon updateGroups SQL Injection Remote Code Execution Vulnerability | high | 7.2 | <22.10.15 | 22.10.15 |
| CVE-2024-23116 | Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability | high | 7.2 | <22.10.15 | 22.10.15 |
| CVE-2024-23117 | Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability | high | 7.2 | <22.10.15 | 22.10.15 |
| CVE-2024-23118 | Centreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability | high | 7.2 | <22.10.15 | 22.10.15 |
| CVE-2019-16405 | Improper Input Validation in Centreon Web | high | 7.2 | <18.10.8 or >=19.0.0 and <19.04.5 | 18.10.8, 19.04.5 |
| CVE-2015-1561 | Centreon Command Injection | high | 8.5 | <2.8.28 | 2.8.28 |
| CVE-2020-13252 | Command Injection in Centreon | high | 8.8 | <19.04.15 | 19.04.15 |
| CVE-2018-11587 | Centreon RCE Vulnerability | critical | 9.8 | =3.4.6 or >=2.8.23 and <2.8.24 | 2.8.24 |
| CVE-2020-22345 | OS Command Injection in Centreon | high | 8.8 | <20.04.0 | 20.04.0 |
| CVE-2018-21025 | Centreon Privilege Escalation | critical | 9.8 | <=19.04.3 | – |
| CVE-2018-19271 | Centreon SQL Injection | high | 8.8 | >=18.0.0 and <18.10.0 or <2.8.28 | 18.10.0, 2.8.28 |
| CVE-2019-17104 | Centreon Does Not Set HTTPOnly Flag | high | 7.5 | <=19.04.3 | – |
| CVE-2018-19312 | Centreon SQL Injection | high | 8.8 | >=18.0.0 and <18.10.0 or >=2.8.0 and <2.8.24 | 18.10.0, 2.8.24 |
| CVE-2018-19281 | Centreon allows SNMP trap SQL Injection | critical | 9.8 | >=18.0.0 and <18.10.0 or >=2.8 and <2.8.27 | 18.10.0, 2.8.27 |
| CVE-2022-40043 | Centreon SQL Injection vulnerability via esc_name parameter | high | 8.8 | <21.04.16 or >=21.10.0 and <21.10.8 or >=22.0.0 and <22.04.2 | 21.04.16, 21.10.8, 22.04.2 |
| CVE-2019-16194 | SQL injection in Centreon | critical | 9.8 | <18.10.8 or >=19.0.0 and <19.04.5 | 18.10.8, 19.04.5 |
| CVE-2024-23119 | Centreon insertGraphTemplate SQL Injection Remote Code Execution Vulnerability | high | 8.8 | <22.10.15 | 22.10.15 |
| CVE-2015-7672 | Centreon Cross-site Scripting Vulnerability | medium | 5.4 | <2.8.27 | 2.8.27 |
| CVE-2018-19311 | Centreon XSS Vulnerability | medium | 5.4 | >=18.0.0 and <18.10.0 | 18.10.0 |
| CVE-2019-17106 | Centreon Sensitive Data Exposure | medium | 6.5 | <2.8.30 | 2.8.30 |
| CVE-2018-19280 | Centreon XSS Vulnerability | medium | 6.1 | >=3.4.0 and <18.10.0 | 18.10.0 |
| CVE-2022-3827 | Centreon vulnerable to SQL Injection | critical | 9.8 | <22.10.0-beta1 | 22.10.0-beta1 |
| CVE-2021-28055 | Predictable CSRF tokens in centreon/centreon | medium | 6.5 | >=20.10.0 and <20.10.7 or >=20.04.0 and <20.04.13 or >=19.10.0 and <19.10.23 or <2.8.37 | 20.10.7, 20.04.13, 19.10.23, 2.8.37 |
| CVE-2022-40044 | Centreon contains cross-site scripting vulnerability via esc_name parameter | medium | 5.4 | <21.04.16 or >=21.10.0 and <21.10.8 or >=22.0.0 and <22.04.1 | 21.04.16, 21.10.8, 22.04.1 |
| CVE-2021-27676 | Cross-site scripting in Centreon | medium | 5.4 | <20.10.7 | 20.10.7 |
| CVE-2020-10945 | Centreon Sensitive Data Exposure vulnerability | medium | 4.3 | >=19.10.0 and <19.10.7 or >=19.0.0 and <19.04.10 or >=18.0.0 and <18.10.11 or <2.8.32 | 19.10.7, 19.04.10, 18.10.11, 2.8.32 |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked