Medium severity6.7NVD Advisory· Published Sep 23, 2024· Updated Jun 17, 2026

CVE-2024-39843

Description

A SQL injection vulnerability in Centreon 24.04.2 allows a remote high-privileged attacker to execute arbitrary SQL command via create user form inputs.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Centreon/Centreon3 versions
cpe:2.3:a:centreon:centreon:24.04.2:-:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:centreon:centreon:24.04.2:-:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: =24.04.2

Patches

Vulnerability mechanics

References

thewatch.centreon.com/latest-security-bulletins-64/security-bulletin-for-centreon-web-3809nvdThird Party Advisory
github.com/centreon/centreon/releasesnvdRelease Notes

News mentions

No linked articles in our index yet.

cvss	0.436
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000