Filtered by vendor Zabbix Subscriptions
Filtered by product Zabbix Server Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-32725 1 Zabbix 2 Frontend, Zabbix Server 2023-12-22 8.8 High
The website configured in the URL widget will receive a session cookie when testing or executing scheduled reports. The received session cookie can then be used to access the frontend as the particular user.
CVE-2023-32727 1 Zabbix 1 Zabbix Server 2023-12-22 7.2 High
An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious command inside it to execute arbitrary code on the current Zabbix server.