Skip to content
OpenAdvisories

Vendor

Zabbix

100 known vulnerabilities.

Products

Zabbix 85 Frontend 11 Zabbix agent 2 (MSI packages) 2 Zabbix agent (MSI packages) 1 Proxy, Server 1 Zabbix Server 1 Web Service Report Generation 1 Zabbix < 6.4.0beta5 0 Zabbix Agent <= v6.2.7 0
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.7
    CVE-2022-23134 Exploited Public exploit Scanner template EPSS 95%

    Possible view of the setup pages by unauthenticated users if config file already exists

    After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend.

    Zabbix Frontend zabbix Debian
    KEV Feb 22, 2022
  • Critical 9.1
    CVE-2022-23131 Exploited Public exploit Scanner template EPSS 96%

    Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML

    In the case of instances where the SAML SSO authentication is enabled (non-default), session data can be modified by a malicious actor, because a user login stored in the session was not verified. Malicious unauthenticated actor may exploit this issue to esca…

    Zabbix Frontend
    KEV Feb 22, 2022