Поиск уязвимостей
Количество 8
Количество 8
BDU:2023-01712
Уязвимость универсальной системы мониторинга Zabbix, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю оказать воздействие на целостность данных
ALT-PU-2021-2668
ALT-PU-2021-2668: package `zabbix` update to version 5.4.3-alt1
CVE-2022-35230
An authenticated user can create a link with reflected Javascript code inside it for the graphs page and send it to other users. The payload can be executed only with a known CSRF token value of the victim, which is changed periodically and is difficult to predict.
CVE-2022-35230
An authenticated user can create a link with reflected Javascript code inside it for the graphs page and send it to other users. The payload can be executed only with a known CSRF token value of the victim, which is changed periodically and is difficult to predict.
CVE-2022-35230
An authenticated user can create a link with reflected Javascript code ...
SUSE-SU-2022:3101-1
Security update for zabbix
GHSA-6f4g-hm4f-cqp3
An authenticated user can create a link with reflected Javascript code inside it for the graphs page and send it to other users. The payload can be executed only with a known CSRF token value of the victim, which is changed periodically and is difficult to predict.
ALT-PU-2021-2582
ALT-PU-2021-2582: package `zabbix` update to version 5.4.3-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2023-01712 Уязвимость универсальной системы мониторинга Zabbix, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю оказать воздействие на целостность данных | CVSS3: 5.4 | 1% Низкий | больше 4 лет назад |
| ALT-PU-2021-2668 ALT-PU-2021-2668: package `zabbix` update to version 5.4.3-alt1 | CVSS3: 7.2 | около 5 лет назад | |
 | CVE-2022-35230 An authenticated user can create a link with reflected Javascript code inside it for the graphs page and send it to other users. The payload can be executed only with a known CSRF token value of the victim, which is changed periodically and is difficult to predict. | CVSS3: 5.4 | 1% Низкий | больше 4 лет назад |
 | CVE-2022-35230 An authenticated user can create a link with reflected Javascript code inside it for the graphs page and send it to other users. The payload can be executed only with a known CSRF token value of the victim, which is changed periodically and is difficult to predict. | CVSS3: 5.4 | 1% Низкий | больше 4 лет назад |
| CVE-2022-35230 An authenticated user can create a link with reflected Javascript code ... | CVSS3: 5.4 | 1% Низкий | больше 4 лет назад |
 | SUSE-SU-2022:3101-1 Security update for zabbix | 1% Низкий | около 4 лет назад | |
| GHSA-6f4g-hm4f-cqp3 An authenticated user can create a link with reflected Javascript code inside it for the graphs page and send it to other users. The payload can be executed only with a known CSRF token value of the victim, which is changed periodically and is difficult to predict. | CVSS3: 5.4 | 1% Низкий | больше 4 лет назад |
| ALT-PU-2021-2582 ALT-PU-2021-2582: package `zabbix` update to version 5.4.3-alt1 | CVSS3: 9.1 | около 5 лет назад |
Уязвимостей на страницу