What is CVE-2025-3767?

CVE-2025-3767 is a high-severity vulnerability in Centreon Bam, classified under SQL Injection. CVSS score: 7.2/10. Published 2025-04-22.

How severe is CVE-2025-3767?

High severity. CVSS v3 base score is 7.2 out of 10.

SQL Injection in Centreon Bam

CVE-2025-3767

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon BAM (Boolean KPi Listing modules) allows SQL Injection. This page is only accessible to authenticated users with high privileges. This issue affects Centreon BAM: from 24.10 before 24.10.1, from 24.04 before 24.04.5, from 23.10 before 23.10.10, from 23.04 before 23.04.10.

Vulnerability class: SQL Injection

EPSS: 0.004 (31.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Centreon Bam — versions 24.10, 24.04, 23.10

Weakness classification (CWE)

CWE-89 — SQL Injection

References

bd4443e6-1eef-43f3-9886-25fc9ceeaae7 (vendor-advisory)
bd4443e6-1eef-43f3-9886-25fc9ceeaae7 (release-notes)

Frequently asked questions

What is CVE-2025-3767?: CVE-2025-3767 is a high-severity vulnerability in Centreon Bam, classified under SQL Injection. CVSS score: 7.2/10. Published 2025-04-22.
How severe is CVE-2025-3767?: High severity. CVSS v3 base score is 7.2 out of 10.