Zabbix vulnerabilities
100 CVEs and advisories name Zabbix as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2022-24919Reflected XSS in graph configuration window of Zabbix Frontend
- CVE-2022-24918Reflected XSS in item configuration window of Zabbix Frontend
- CVE-2022-24917Reflected XSS in service configuration window of Zabbix Frontend
- CVE-2022-24349Reflected XSS in action configuration window of Zabbix Frontend
- CVE-2022-23134Possible view of the setup pages by unauthenticated users if config file already exists
- CVE-2022-23133Stored XSS in host groups configuration window in Zabbix Frontend
- CVE-2022-23132Incorrect permissions of [/var/run/zabbix] forces dac_override
- CVE-2022-23131Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML
- CVE-2013-3628Zabbix 2.0.9 has an Arbitrary Command Execution Vulnerability
- CVE-2017-2824An exploitable code execution vulnerability exists in the trapper command functionality of Zabbix Server 2.4.X.