Zabbix Frontend vulnerabilities
11 published CVEs name Zabbix Frontend among the affected products; CISA lists 2 of them as exploited in the wild.
- Published CVEs
- 11
- Last 12 months
- 0
- Critical
- 1
- Known exploited
- 2
Critical 1High 0Medium 4Low 6Not scored 0
Known exploitedNewest addition to KEV first
- CVE-2022-23134
Possible view of the setup pages by unauthenticated users if config file already exists
Zabbix · Frontend
ExploitedLow3.7 - CVE-2022-23131
Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML
Zabbix · Frontend
ExploitedCritical9.1
Newest CVEs
- CVE-2022-43515
X-Forwarded-For header is active by default causes access to Zabbix sites in maintenance mode
Zabbix · Frontend
Medium5.3 - CVE-2022-40626
Reflected XSS in the backurl parameter of Zabbix Frontend
Zabbix · Frontend
Medium4.8 - CVE-2022-35230
Reflected XSS in graphs page of Zabbix Frontend
Zabbix · Frontend
Low3.7 - CVE-2022-35229
Reflected XSS in discovery page of Zabbix Frontend
Zabbix · Frontend
Low3.7 - CVE-2022-24919
Reflected XSS in graph configuration window of Zabbix Frontend
Zabbix · Frontend
Low3.7 - CVE-2022-24918
Reflected XSS in item configuration window of Zabbix Frontend
Zabbix · Frontend
Low3.7 - CVE-2022-24917
Reflected XSS in service configuration window of Zabbix Frontend
Zabbix · Frontend
Low3.7 - CVE-2022-24349
Reflected XSS in action configuration window of Zabbix Frontend
Zabbix · Frontend
Medium4.6 - CVE-2022-23134
Possible view of the setup pages by unauthenticated users if config file already exists
Zabbix · Frontend
ExploitedLow3.7 - CVE-2022-23133
Stored XSS in host groups configuration window in Zabbix Frontend
Zabbix · Frontend
Medium6.3