# centreon/centreon (Packagist) vulnerabilities

Source: https://junglewise.ai/threats/technologies/centreon-centreon  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour.  
Data: https://junglewise.ai/threats/technologies/centreon-centreon.json  
License: CC BY 4.0 with a link back

Junglewise Threat Intelligence has tracked 27 vulnerabilities in centreon/centreon (Packagist): 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2024-0637, was published on 2 April 2024.

## Counts

- Last 7 days: 0
- Last 30 days: 0
- Last 90 days: 0
- All time: 27 (0 critical, 0 exploited in the wild)

## About centreon/centreon (Packagist)

Centreon is an open-source infrastructure monitoring and network supervision platform.

## Latest centreon/centreon (Packagist) vulnerabilities

- [CVE-2024-0637: Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2024-0637-centreon-updatedirectory-sql-injection-remote-code-execution) (low, CVSS 3, published 2 Apr 2024)
- [CVE-2024-23119: Centreon insertGraphTemplate SQL Injection Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2024-23119-centreon-insertgraphtemplate-sql-injection-remote-code-execution) (low, CVSS 3, published 2 Apr 2024)
- [CVE-2024-23118: Centreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2024-23118-centreon-updatecontacthostcommands-sql-injection-remote-code) (low, CVSS 3, published 2 Apr 2024)
- [CVE-2024-23115: Centreon updateGroups SQL Injection Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2024-23115-centreon-updategroups-sql-injection-remote-code-execution) (low, CVSS 3, published 2 Apr 2024)
- [CVE-2024-23116: Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2024-23116-centreon-updatelcarelation-sql-injection-remote-code-execution) (low, CVSS 3, published 2 Apr 2024)
- [CVE-2024-23117: Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2024-23117-centreon-updatecontactservicecommands-sql-injection-remote-code) (low, CVSS 3, published 2 Apr 2024)
- [CVE-2022-3827: Centreon vulnerable to SQL Injection](https://junglewise.ai/threats/cve-2022-3827-centreon-vulnerable-to-sql-injection) (low, CVSS 3.1, published 2 Nov 2022)
- [CVE-2022-40044: Centreon contains cross-site scripting vulnerability via esc_name parameter](https://junglewise.ai/threats/cve-2022-40044-centreon-contains-cross-site-scripting-vulnerability-via-esc-name) (low, CVSS 3.1, published 27 Sep 2022)
- [CVE-2022-40043: Centreon SQL Injection vulnerability via esc_name parameter](https://junglewise.ai/threats/cve-2022-40043-centreon-sql-injection-vulnerability-via-esc-name-parameter) (low, CVSS 3.1, published 27 Sep 2022)
- [CVE-2020-10945: Centreon Sensitive Data Exposure vulnerability](https://junglewise.ai/threats/cve-2020-10945-centreon-sensitive-data-exposure-vulnerability) (low, CVSS 3.1, published 24 May 2022)
- [CVE-2019-17106: Centreon Sensitive Data Exposure](https://junglewise.ai/threats/cve-2019-17106-centreon-sensitive-data-exposure) (low, CVSS 3.1, published 24 May 2022)
- [CVE-2019-17104: Centreon Does Not Set HTTPOnly Flag](https://junglewise.ai/threats/cve-2019-17104-centreon-does-not-set-httponly-flag) (low, CVSS 3.1, published 24 May 2022)
- [CVE-2018-21025: Centreon Privilege Escalation](https://junglewise.ai/threats/cve-2018-21025-centreon-privilege-escalation) (low, CVSS 3.1, published 24 May 2022)
- [CVE-2018-11587: Centreon RCE Vulnerability](https://junglewise.ai/threats/cve-2018-11587-centreon-rce-vulnerability) (low, CVSS 3, published 14 May 2022)
- [CVE-2015-7672: Centreon Cross-site Scripting Vulnerability](https://junglewise.ai/threats/cve-2015-7672-centreon-cross-site-scripting-vulnerability) (low, CVSS 3, published 14 May 2022)
- [CVE-2018-19312: Centreon SQL Injection](https://junglewise.ai/threats/cve-2018-19312-centreon-sql-injection) (low, CVSS 3, published 14 May 2022)
- [CVE-2018-19280: Centreon XSS Vulnerability](https://junglewise.ai/threats/cve-2018-19280-centreon-xss-vulnerability) (low, CVSS 3, published 14 May 2022)
- [CVE-2018-19271: Centreon SQL Injection](https://junglewise.ai/threats/cve-2018-19271-centreon-sql-injection) (low, CVSS 3, published 14 May 2022)
- [CVE-2018-19281: Centreon allows SNMP trap SQL Injection](https://junglewise.ai/threats/cve-2018-19281-centreon-allows-snmp-trap-sql-injection) (low, CVSS 3, published 14 May 2022)
- [CVE-2018-19311: Centreon XSS Vulnerability](https://junglewise.ai/threats/cve-2018-19311-centreon-xss-vulnerability) (low, CVSS 3, published 14 May 2022)
- [CVE-2015-1561: Centreon Command Injection](https://junglewise.ai/threats/cve-2015-1561-centreon-command-injection) (low, CVSS 3.1, published 14 May 2022)
- [CVE-2020-22345: OS Command Injection in Centreon](https://junglewise.ai/threats/cve-2020-22345-os-command-injection-in-centreon) (low, CVSS 3.1, published 2 Sep 2021)
- [CVE-2019-16405: Improper Input Validation in Centreon Web](https://junglewise.ai/threats/cve-2019-16405-improper-input-validation-in-centreon-web) (low, CVSS 3.1, published 28 Jul 2021)
- [CVE-2020-13252: Command Injection in Centreon](https://junglewise.ai/threats/cve-2020-13252-command-injection-in-centreon) (low, CVSS 3.1, published 22 Jun 2021)
- [CVE-2021-27676: Cross-site scripting in Centreon](https://junglewise.ai/threats/cve-2021-27676-cross-site-scripting-in-centreon) (low, CVSS 3.1, published 8 Jun 2021)

## Most severe centreon/centreon (Packagist) vulnerabilities

- [CVE-2019-16405: Improper Input Validation in Centreon Web](https://junglewise.ai/threats/cve-2019-16405-improper-input-validation-in-centreon-web) (low, CVSS 3.1, published 28 Jul 2021)
- [CVE-2015-1561: Centreon Command Injection](https://junglewise.ai/threats/cve-2015-1561-centreon-command-injection) (low, CVSS 3.1, published 14 May 2022)
- [CVE-2020-13252: Command Injection in Centreon](https://junglewise.ai/threats/cve-2020-13252-command-injection-in-centreon) (low, CVSS 3.1, published 22 Jun 2021)
- [CVE-2020-22345: OS Command Injection in Centreon](https://junglewise.ai/threats/cve-2020-22345-os-command-injection-in-centreon) (low, CVSS 3.1, published 2 Sep 2021)
- [CVE-2018-21025: Centreon Privilege Escalation](https://junglewise.ai/threats/cve-2018-21025-centreon-privilege-escalation) (low, CVSS 3.1, published 24 May 2022)
- [CVE-2019-17104: Centreon Does Not Set HTTPOnly Flag](https://junglewise.ai/threats/cve-2019-17104-centreon-does-not-set-httponly-flag) (low, CVSS 3.1, published 24 May 2022)
- [CVE-2019-16194: SQL injection in Centreon](https://junglewise.ai/threats/cve-2019-16194-sql-injection-in-centreon) (low, CVSS 3.1, published 11 Feb 2020)
- [CVE-2022-40043: Centreon SQL Injection vulnerability via esc_name parameter](https://junglewise.ai/threats/cve-2022-40043-centreon-sql-injection-vulnerability-via-esc-name-parameter) (low, CVSS 3.1, published 27 Sep 2022)
- [CVE-2019-17106: Centreon Sensitive Data Exposure](https://junglewise.ai/threats/cve-2019-17106-centreon-sensitive-data-exposure) (low, CVSS 3.1, published 24 May 2022)
- [CVE-2022-3827: Centreon vulnerable to SQL Injection](https://junglewise.ai/threats/cve-2022-3827-centreon-vulnerable-to-sql-injection) (low, CVSS 3.1, published 2 Nov 2022)

## Vulnerabilities per week

Nothing was published in the last eight weeks.

| Week of | Vulns | Critical | Exploited |
| --- | --- | --- | --- |
| 17 Aug 2026 | 0 | 0 | 0 |
| 24 Aug 2026 | 0 | 0 | 0 |
| 31 Aug 2026 | 0 | 0 | 0 |
| 7 Sep 2026 | 0 | 0 | 0 |
| 14 Sep 2026 | 0 | 0 | 0 |
| 21 Sep 2026 | 0 | 0 | 0 |
| 28 Sep 2026 | 0 | 0 | 0 |
| 5 Oct 2026 | 0 | 0 | 0 |
| 12 Oct 2026 | 0 | 0 | 0 |
| 19 Oct 2026 | 0 | 0 | 0 |
| 26 Oct 2026 | 0 | 0 | 0 |
| 2 Nov 2026 | 0 | 0 | 0 |
| 9 Nov 2026 | 0 | 0 | 0 |

## Other Packagist technologies

- [moodle/moodle (Packagist)](https://junglewise.ai/threats/technologies/moodle-moodle): 434 vulnerabilities
- [magento/community-edition (Packagist)](https://junglewise.ai/threats/technologies/packagist-magento-community-edition): 362 vulnerabilities
- [typo3/cms (Packagist)](https://junglewise.ai/threats/technologies/packagist-typo3-cms): 187 vulnerabilities
- [wwbn/avideo (Packagist)](https://junglewise.ai/threats/technologies/wwbn-avideo): 164 vulnerabilities
- [magento/project-community-edition (Packagist)](https://junglewise.ai/threats/technologies/magento-project-community-edition): 161 vulnerabilities
- [drupal/core (Packagist)](https://junglewise.ai/threats/technologies/packagist-drupal-core): 150 vulnerabilities
- [pimcore/pimcore (Packagist)](https://junglewise.ai/threats/technologies/pimcore-pimcore): 145 vulnerabilities
- [craftcms/cms (Packagist)](https://junglewise.ai/threats/technologies/craftcms-cms): 143 vulnerabilities
- [dolibarr/dolibarr (Packagist)](https://junglewise.ai/threats/technologies/dolibarr-dolibarr): 127 vulnerabilities
- [getgrav/grav (Packagist)](https://junglewise.ai/threats/technologies/getgrav-grav): 127 vulnerabilities
- [typo3/cms-core (Packagist)](https://junglewise.ai/threats/technologies/typo3-cms-core): 127 vulnerabilities
- [concrete5/concrete5 (Packagist)](https://junglewise.ai/threats/technologies/concrete5-concrete5): 122 vulnerabilities

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "centreon/centreon (Packagist) vulnerabilities", https://junglewise.ai/threats/technologies/centreon-centreon, 9 November 2026.