CVE-2025-3767

SQL Injection in Centreon BAM boolean KPI listing

State: Published
Severity: 7.2 High
Published: Apr 22, 2025
Updated: Apr 22, 2025
Reserved: Apr 17, 2025

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon BAM (Boolean KPi Listing modules) allows SQL Injection.

This page is only accessible to authenticated users with high privileges.

This issue affects Centreon BAM: from 24.10 before 24.10.1, from 24.04 before 24.04.5, from 23.10 before 23.10.10, from 23.04 before 23.04.10.

Scores

CVSS	Score	Vector	Source
3.1	7.2 High	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	Centreon

Weaknesses

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Affected Products

Product	Versions
Centreon BAMCentreon	24.10 to before 24.10.1Affected 24.04 to before 24.04.5Affected 23.10 to before 23.10.10Affected 23.04 to before 23.04.10Affected

References

https://thewatch.centreon.com/latest-security-bulletins-64/cve-2024-46924-cve-2025-3767-centreon-bam-high-severity-4459vendor-advisory
https://github.com/centreon/centreon/releasesrelease-notes

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.