Количество 6
Количество 6
CVE-2024-22120
Zabbix server can perform command execution for configured scripts. After command is executed, audit entry is added to "Audit Log". Due to "clientip" field is not sanitized, it is possible to injection SQL into "clientip" and exploit time based blind SQL injection.
CVE-2024-22120
Zabbix server can perform command execution for configured scripts. After command is executed, audit entry is added to "Audit Log". Due to "clientip" field is not sanitized, it is possible to injection SQL into "clientip" and exploit time based blind SQL injection.
CVE-2024-22120
Zabbix server can perform command execution for configured scripts. Af ...
GHSA-625f-58w6-wj9f
Zabbix server can perform command execution for configured scripts. After command is executed, audit entry is added to "Audit Log". Due to "clientip" field is not sanitized, it is possible to injection SQL into "clientip" and exploit time based blind SQL injection.
BDU:2024-03942
Уязвимость сервера универсальной системы мониторинга Zabbix Workstation, связанная с ошибками при обработке входных данных, позволяющая нарушителю выполнить произвольный код
ROS-20240611-05
Уязвимость zabbix
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-22120 Zabbix server can perform command execution for configured scripts. After command is executed, audit entry is added to "Audit Log". Due to "clientip" field is not sanitized, it is possible to injection SQL into "clientip" and exploit time based blind SQL injection. | CVSS3: 9.1 | 92% Критический | почти 2 года назад |
 | CVE-2024-22120 Zabbix server can perform command execution for configured scripts. After command is executed, audit entry is added to "Audit Log". Due to "clientip" field is not sanitized, it is possible to injection SQL into "clientip" and exploit time based blind SQL injection. | CVSS3: 9.1 | 92% Критический | почти 2 года назад |
| CVE-2024-22120 Zabbix server can perform command execution for configured scripts. Af ... | CVSS3: 9.1 | 92% Критический | почти 2 года назад |
| GHSA-625f-58w6-wj9f Zabbix server can perform command execution for configured scripts. After command is executed, audit entry is added to "Audit Log". Due to "clientip" field is not sanitized, it is possible to injection SQL into "clientip" and exploit time based blind SQL injection. | CVSS3: 9.1 | 92% Критический | почти 2 года назад |
 | BDU:2024-03942 Уязвимость сервера универсальной системы мониторинга Zabbix Workstation, связанная с ошибками при обработке входных данных, позволяющая нарушителю выполнить произвольный код | CVSS3: 9.1 | 92% Критический | почти 2 года назад |
 | ROS-20240611-05 Уязвимость zabbix | CVSS3: 9.1 | 92% Критический | почти 2 года назад |
Уязвимостей на страницу