CVE-2018-11587

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

There is Remote Code Execution in Centreon 3.4.6 including Centreon Web 2.8.23 via the RPN value in the Virtual Metric form in centreonGraph.class.php.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-94

Affected software

No affected versions have been published.

Timeline

Published
Jun 25, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-115885.4Centreon 3.4.6 including Centreon Web 2.8.23 is vulnerable to an authenticated user injecting a payload into the username or command descripCVE-2018-115899.8Multiple SQL injection vulnerabilities in Centreon 3.4.6 including Centreon Web 2.8.23 allow attacks via the searchU parameter in viewLogs.pCVE-2018-11596.5Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a memory corruption vulnerability. An authenticated remote attacker can crash thCVE-2018-115905.5Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via an integer overfloCVE-2018-115915.5Espruino before 1.98 allows attackers to cause a denial of service (application crash) with a user crafted input file via a NULL pointer derCVE-2018-115925.5Espruino before 1.98 allows attackers to cause a denial of service (application crash) with a user crafted input file via an Out-of-bounds RCVE-2018-115937.1Espruino before 1.99 allows attackers to cause a denial of service (application crash) and potential Information Disclosure with a user crafCVE-2018-115945.5Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via a Buffer Overflow CVE-2018-115957.8Espruino before 1.99 allows attackers to cause a denial of service (application crash) and a potential Escalation of Privileges with a user CVE-2018-115965.5Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via a Buffer Overflow CVE-2018-115975.5Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via a Buffer Overflow CVE-2018-115987.1Espruino before 1.99 allows attackers to cause a denial of service (application crash) and a potential Information Disclosure with user craf
CVE-2018-11587: Critical severity, CVSS 9.8 | Vulnix