CVE-2025-6791High 8.8Second order SQL injection available to user with low privilege0.3%
CVE-2025-4650High 7.2User with high privileges is able to introduce a SQLi using the Meta Service indicator page0.4%
CVE-2025-4649Medium 4.9ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs.0.4%
CVE-2025-4648High 8.4A user with elevated privileges can inject XSS by altering the content of a SVG media during the submit request.0.3%
CVE-2025-4647High 8.4A user with elevated privileges can bypass sanitization measures by replacing the content of an existing SVG0.3%
CVE-2025-4646High 7.2A high privilege user is able to create and use a valid admin API token in centreon-web0.4%