CVE-2018-11588: Centreon

Medium severity, CVSS 5.4. EPSS: 1.1% chance of exploitation in the next 30 days.

Centreon 3.4.6 including Centreon Web 2.8.23 is vulnerable to an authenticated user injecting a payload into the username or command description, resulting in stored XSS. This is related to www/include/core/menu/menu.php and www/include/configuration/configObject/command/formArguments.php.

Affected products

• Centreon Centreon: version 3.4.6 only
• Centreon Centreon Web: version 2.8.23 only

Published 2018-06-25. Last modified 2026-06-17.