{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-29T14:52:32.761","vulnerabilities":[{"cve":{"id":"CVE-2025-6791","sourceIdentifier":"bd4443e6-1eef-43f3-9886-25fc9ceeaae7","published":"2025-08-22T19:15:40.537","lastModified":"2026-06-17T10:02:34.690","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"In the monitoring event logs page, it is possible to alter the http request to insert a reflect payload in the DB. Caused by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon web (Monitoring event logs modules) allows SQL Injection.This issue affects web: 24.10.0, 24.04.0, 23.10.0."},{"lang":"es","value":"En la página de monitoreo de registros de eventos, es posible modificar la solicitud HTTP para insertar un payload en la base de datos. Esto se debe a una vulnerabilidad de neutralización incorrecta de elementos especiales utilizados en un comando SQL ('Inyección SQL') en la web de Centreon (módulos de monitoreo de registros de eventos) que permite la inyección SQL. Este problema afecta a la web: desde la versión 24.10.0 hasta la 24.10.9, desde la versión 24.04.0 hasta la 24.04.16, desde la versión 23.10.0 hasta la 23.10.26."}],"affected":[{"source":"bd4443e6-1eef-43f3-9886-25fc9ceeaae7","affectedData":[{"vendor":"Centreon","product":"web","defaultStatus":"unaffected","modules":["Monitoring event logs"],"versions":[{"version":"24.10.0","lessThan":"24.10.9","versionType":"custom","status":"affected"},{"version":"24.04.0","lessThan":"24.04.16","versionType":"custom","status":"affected"},{"version":"23.10.0","lessThan":"23.10.26","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"bd4443e6-1eef-43f3-9886-25fc9ceeaae7","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-08-22T20:11:47.445230Z","id":"CVE-2025-6791","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"bd4443e6-1eef-43f3-9886-25fc9ceeaae7","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*","versionStartIncluding":"23.10.0","versionEndExcluding":"23.10.26","matchCriteriaId":"C26D15FD-EFFC-48FE-BC84-A518F91148DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*","versionStartIncluding":"24.04.0","versionEndExcluding":"24.04.16","matchCriteriaId":"19652073-5857-4F6A-85E0-A2B35E36AA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:centreon:centreon_web:*:*:*:*:*:*:*:*","versionStartIncluding":"24.10.0","versionEndExcluding":"24.10.9","matchCriteriaId":"F1E5A4E9-BADF-463F-9632-200EFFDC8F36"}]}]}],"references":[{"url":"https://github.com/centreon/centreon/releases","source":"bd4443e6-1eef-43f3-9886-25fc9ceeaae7","tags":["Release Notes"]},{"url":"https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-6791-centreon-web-all-versions-high-severity-4900","source":"bd4443e6-1eef-43f3-9886-25fc9ceeaae7","tags":["Vendor Advisory"]}]}}]}