Zabbix

Records145All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical24CVSS 9.0–10.0

CVSS high41CVSS 7.0–8.9

Exploited now

Zabbix records in CISA KEV

TI-2022-07300 Zabbix Frontend Authentication Bypass Vulnerability CRITICAL 100KEV 2022-02-22 TI-2022-07303 Zabbix Frontend Improper Access Control Vulnerability HIGH 81KEV 2022-02-22

Components

Products in the NVD configurations · select one to filter the records

Zabbix 115 records CRITICAL Frontend 13 records HIGH Zabbix-agent2 4 records MEDIUM Zabbix Server 2 records MEDIUM Web Service Report Generation 1 record MEDIUM Zabbix-agent 1 record LOW Zabbix Agentd 1 record LOW

Records

2 records in Zabbix Server · all components

TI-2023-15994 CVE-2023-32725

Leak of zbx_session cookie when using a scheduled report that includes a dashboard with a URL widget.

MEDIUM 43

The website configured in the URL widget will receive a session cookie when testing or executing scheduled reports.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00849 Published 2023-12-18 No fix listed CWE-565

TI-2023-15996 CVE-2023-32727 · GHSA-8h32-vcmm-pcx8

Code execution vulnerability in icmpping

LOW 35

An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious command inside it to execute arbitrary code on the current Zabbix server.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00873 Published 2023-12-18 No fix listed CWE-20

Open these records in search →

Critical	24
High	41
Medium	63
Low	17
No CVSS	0