CVE-2025-12511

MOYENNE 4.8CVE-2025-12511 · Published 05/01/2026 · updated 17/06/2026

En bref

CVE-2025-12511 est une vulnérabilité MOYENNE (CVSS 4.8) touchant dynamic service management (centreon).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.19%, plus élevée que 9.2% des vulnérabilités.
Correctif : mettre à jour vers 24.04.8, 24.10.4 ou plus récent.

Package	Affected versions	Patched versions
dynamic service management centreon	`= 25.10.0≥ 24.04.0, < 24.04.8≥ 24.10.0, < 24.10.4`	`24.04.824.10.4`

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (DSM extenstio configuration modules) allows Stored XSS to user with elevated privileges. This issue affects Infra Monitoring: from 25.10.0 before 25.10.1, from 24.10.0 before 24.10.4, from 24.04.0 before 24.04.8.

References

centreon/centreon release · Release Notes
thewatch.centreon.com/latest-security-bulletins-64/cve-2025-12511-centreon-dsm-medium-severity-5361 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free