CVE-2019-17108: Centreon Web

Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days.

Local file inclusion in brokerPerformance.php in Centreon Web before 2.8.28 allows attackers to disclose information or perform a stored XSS attack on a user.

Affected products

• Centreon Centreon Web: from 2.8, before 2.8.28 (fixed in 2.8.28); from 18.10.0, before 18.10.5 (fixed in 18.10.5)

Published 2019-10-08. Last modified 2026-06-17.