[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2018-19311":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":20,"cwes":21,"cpes":23,"technologies":28,"references":30,"score":37,"epss_score":38,"epss_percentile":39,"is_kev":40,"cisa_kev_date_added":41,"cisa_kev_due_date":41,"cisa_ssvc":42,"attack_mappings":48,"exploits":55},216596,"CVE-2018-19311","EUVD-2022-3241","Centreon XSS Vulnerability\n\nCentreon 3.4.x (fixed in Centreon 18.10.0) allows XSS via the Service field to the `main.php?p=20201` URI, as demonstrated by the \"Monitoring > Status Details > Services\" screen.","2022-05-14T00:55:00Z",{"cvss_v3.0":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":18,"attackComplexity":17,"availabilityImpact":19,"privilegesRequired":17,"confidentialityImpact":17},"CHANGED","3.0",5.4,"NETWORK","MEDIUM","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","LOW","REQUIRED","NONE",true,[22],"CWE-79",[24,25,26,27],"cpe:2.3:a:centreon:centreon:3.4.1:*:*:*:*:*:*:*","cpe:2.3:a:centreon:centreon:3.4.6:*:*:*:*:*:*:*","cpe:2.3:a:centreon:centreon:3.4.0:*:*:*:*:*:*:*","cpe:2.3:a:centreon:centreon:*:*:*:*:*:*:*:*",[29],"Centreon Centreon",[31,32,33,34,35,36],"http:\u002F\u002Fwww.roothc.com.br\u002F1349-2\u002F","https:\u002F\u002Fdocumentation.centreon.com\u002Fdocs\u002Fcentreon\u002Fen\u002Flatest\u002Frelease_notes\u002Fcentreon-18.10\u002Fcentreon-18.10.0.html","https:\u002F\u002Fgithub.com\u002Fcentreon\u002Fcentreon\u002Fpull\u002F6632","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2018-19311","https:\u002F\u002Fgithub.com\u002Fcentreon\u002Fcentreon-archived\u002Fpull\u002F6632","http:\u002F\u002Fwww.roothc.com.br\u002F1349-2",0.62,0.01159,0.66894,false,null,{"timestamp":41,"automatable":43,"tech_impact":44,"exploitation":45,"cisa_decision":46,"cisa_remediation_timeline":47},"no","partial","none",{},"FSU",[49],{"name":50,"source":51,"tactics":52,"technique_id":54},"Exploit Public-Facing Application","attack_vector",[53],"initial-access","T1190",[56],{"link":31}]