CVE-2025-15029 Centreon CVE debrief

Who should care

Defenders and security teams responsible for Centreon Awie deployments should immediately assess their exposure to this vulnerability. This includes IT administrators, security analysts, and compliance officers who oversee the security of Centreon Awie export modules in their environment.

Why it matters

CVE-2025-15029 is a critical SQL injection vulnerability in Centreon's Awie export modules that allows unauthenticated users to inject malicious SQL. This vulnerability has a CVSS score of 9.8 and affects multiple versions of Centreon Infra Monitoring. Defenders and security teams responsible for Centreon Awie deployments should immediately assess their exposure and prioritize remediation to prevent potential exploitation.

• Potential for malicious SQL injection by unauthenticated users
• Possible unauthorized access to sensitive data
• Risk of data tampering or deletion
• Need for immediate remediation to prevent exploitation

Technical summary

The CVE-2025-15029 vulnerability is a SQL injection issue in Centreon's Awie export modules. This vulnerability allows unauthenticated users to inject malicious SQL, potentially leading to severe consequences. The CVSS score for this vulnerability is 9.8, indicating a critical severity level. Affected versions of Centreon Infra Monitoring include 25.10.0 before 25.10.2, 24.10.0 before 24.10.3, and 24.04.0 before 24.04.3.

Defensive priority

High priority for immediate assessment and remediation

Recommended defensive actions

• Immediately assess exposure of Centreon Awie export modules in your environment
• Verify if any compensating controls are in place to mitigate potential SQL injection attacks
• Prioritize remediation to upgrade to a non-vulnerable version of Centreon Awie
• Monitor for potential malicious activity related to this vulnerability
• Review relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The vulnerability is described as a SQL injection issue in Centreon's Awie export modules, with a CVSS score of 9.8 and a severity of CRITICAL. Affected versions include Infra Monitoring from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.3, and from 24.04.0 before 24.04.3.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.