Skip to content
OpenAdvisories

Vendor

Zabbix

100 known vulnerabilities.

Products

Zabbix 85 Frontend 11 Zabbix agent 2 (MSI packages) 2 Zabbix agent (MSI packages) 1 Proxy, Server 1 Zabbix Server 1 Web Service Report Generation 1 Zabbix < 6.4.0beta5 0 Zabbix Agent <= v6.2.7 0
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2022-23131 Exploited Public exploit Scanner template EPSS 96%

    Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML

    In the case of instances where the SAML SSO authentication is enabled (non-default), session data can be modified by a malicious actor, because a user login stored in the session was not verified. Malicious unauthenticated actor may exploit this issue to esca…

    Zabbix Frontend
    KEV Feb 22, 2022