Security Advisory

CVE-2025-12514

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-12-22 10:59:18
Last updated 2026-01-05 09:52:48
Assigner Centreon
State PUBLISHED

Description

Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) vulnerability in Centreon Infra Monitoring - Open-tickets (Notification rules configuration parameters, Open tickets modules) allows SQL Injection to user with elevated privileges.This issue affects Infra Monitoring - Open-tickets: from 24.10.0 before 24.10.5, from 24.04.0 before 24.04.5, from 23.10.0 before 23.10.4.