Zabbix Security Vulnerabilities and Issues — Zabbix CVE List

Lucene search

ZabbixZabbix

3 matches found

CVE•added 2013/10/01 3:48 a.m.•68 views

CVE-2013-5572

Zabbix 2.0.5 allows remote authenticated users to discover the LDAP bind password by leveraging management-console access and reading the ldap_bind_password value in the HTML source code.

3.5CVSS8.8AI score0.07821EPSS

CVE•added 2013/12/14 5:21 p.m.•65 views

CVE-2013-1364

The user.login function in Zabbix before 1.8.16 and 2.x before 2.0.5rc1 allows remote attackers to override LDAP configuration via the cnf parameter.

5CVSS9.2AI score0.00441EPSS

CVE•added 2013/12/19 4:24 a.m.•55 views

CVE-2013-6824

Zabbix before 1.8.19rc1, 2.0 before 2.0.10rc1, and 2.2 before 2.2.1rc1 allows remote Zabbix servers and proxies to execute arbitrary commands via a newline in a flexible user parameter.

7.5CVSS9.5AI score0.00802EPSS