Known vulnerabilities in zabbix

Vendor: Fedoraproject
Software: zabbix
Software CPE: cpe:2.3:o:fedoraproject:zabbix:*:*:*:*:*:fedora:*:*
Website: https://getfedora.org/
Total vulnerabilities: 28
Public exploits: 4
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting zabbix zabbix is affected by 28 known vulnerabilities: 2 high, 7 medium, 19 low Critical High Medium Low

Vulnerabilities (28)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153280 - Exposure of sensitive information to an unauthorized actor
CVE-2026-59782		 CWE-200 Low
No
No
 6.0.48-1.el9 05.10.2026 SB2026100544
SB2026100548
SB2026100549
and 5 more
#VU153278 - Exposure of sensitive information to an unauthorized actor
CVE-2026-59785		 CWE-200 Low
No
No
 6.0.48-1.el9 05.10.2026 SB2026100544
SB2026100548
SB2026100549
and 5 more
#VU153276 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-59787		 CWE-74 Low
No
No
 6.0.48-1.el9 05.10.2026 SB2026100544
SB2026100548
SB2026100549
and 5 more
#VU106941 - Resource exhaustion
CVE-2024-45700		 CWE-400 Medium
No
No
 6.0.39-1.el9, 6.0.39-1.fc40, 7.0.11-1.fc41, 7.2.5-1.fc42 03.04.2025 SB2025040345
SB2025040355
SB2025040356
and 5 more
#VU106940 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45699		 CWE-79 Low
No
No
 6.0.39-1.el9, 6.0.39-1.fc40, 7.0.11-1.fc41 03.04.2025 SB2025040346
SB2025040355
SB2025040356
and 4 more
#VU106939 - Exposure of sensitive information to an unauthorized actor
CVE-2024-36469		 CWE-200 Low
No
No
 6.0.39-1.el9, 6.0.39-1.fc40, 7.0.11-1.fc41, 7.2.5-1.fc42 03.04.2025 SB2025040348
SB2025040355
SB2025040356
and 6 more
#VU106938 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-36465		 CWE-89 Medium
No
No
 7.0.11-1.fc41 03.04.2025 SB2025040347
SB2025040355
SB2025040357
and 1 more
#VU106937 - Exposure of sensitive information to an unauthorized actor
CVE-2024-42325		 CWE-200 Low
No
No
 6.0.39-1.el9, 6.0.39-1.fc40, 7.0.11-1.fc41, 7.2.5-1.fc42 03.04.2025 SB2025040348
SB2025040355
SB2025040356
and 6 more
#VU101064 - Improper Output Neutralization for Logs
CVE-2024-42332		 CWE-117 Low
No
No
 6.0.36-1.el9, 6.0.36-1.fc40 01.12.2024 SB2024120102
SB2024120103
SB2024120104
and 1 more
#VU101063 - Out-of-bounds read
CVE-2024-42333		 CWE-125 Low
No
No
 6.0.36-1.el9, 6.0.36-1.fc40 01.12.2024 SB2024120101
SB2024120103
SB2024120104
and 2 more
#VU101062 - Use of Externally-Controlled Format String
CVE-2024-42330		 CWE-134 Medium
No
No
 6.0.36-1.el9, 6.0.36-1.fc40 01.12.2024 SB2024120101
SB2024120103
SB2024120104
and 1 more
#VU94502 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-40626		 CWE-79 Low
No
No
 6.0.8-1.fc37 17.07.2024 SB20240717126
SB2022091468
#VU94495 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-24918		 CWE-79 Low
No
No
 5.0.21-1.fc34, 5.0.21-1.fc35, 5.0.21-1.fc36, 5.0-820220312165755.9edba152 17.07.2024 SB20240717124
SB2022041976
SB2022031114
and 6 more
#VU94494 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-24917		 CWE-79 Low
No
No
 5.0.21-1.fc34, 5.0.21-1.fc35, 5.0.21-1.fc36, 5.0-820220312165755.9edba152 17.07.2024 SB20240717124
SB2022041976
SB2022031114
and 6 more
#VU94493 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-24919		 CWE-79 Low
No
No
 5.0.21-1.fc34, 5.0.21-1.fc35, 5.0.21-1.fc36, 5.0-820220312165755.9edba152 17.07.2024 SB20240717124
SB2022041976
SB2022031114
and 6 more
#VU94489 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-24349		 CWE-79 Low
No
No
 5.0.21-1.fc34, 5.0.21-1.fc35, 5.0.21-1.fc36, 5.0-820220312165755.9edba152 17.07.2024 SB20240717124
SB2022041976
SB2022031114
and 6 more
#VU85066 - Out-of-bounds read
CVE-2023-32726		 CWE-125 Low
No
No
 6.0.25-1.el9, 6.0.25-1.fc38, 6.0.25-1.fc39 08.01.2024 SB2024010824
SB2024010829
SB2024010831
and 2 more
#VU60815 - Improper Access Control
CVE-2022-23134		 CWE-284 Medium
No
Exploited
 5.0.19-1.fc34, 5.0.19-1.fc35, 5.0-820220117005358.9edba152 23.02.2022 SB2022022308
SB2022011425
SB2022011426
and 3 more
#VU60814 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23133		 CWE-79 Low
No
No
 5.0.19-1.fc34, 5.0.19-1.fc35, 5.0-820220117005358.9edba152 23.02.2022 SB2022022306
SB2022011425
SB2022011426
and 3 more
#VU60812 - Permissions, Privileges, and Access Controls
CVE-2022-23132		 CWE-264 Low
No
No
 5.0.19-1.fc34, 5.0.19-1.fc35, 5.0-820220117005358.9edba152 23.02.2022 SB2022022306
SB2022011425
SB2022011426
and 3 more


Showing elements 1 - 20 out of 28