Количество 6
Количество 6
CVE-2024-22120
Zabbix server can perform command execution for configured scripts. After command is executed, audit entry is added to "Audit Log". Due to "clientip" field is not sanitized, it is possible to injection SQL into "clientip" and exploit time based blind SQL injection.
CVE-2024-22120
Zabbix server can perform command execution for configured scripts. After command is executed, audit entry is added to "Audit Log". Due to "clientip" field is not sanitized, it is possible to injection SQL into "clientip" and exploit time based blind SQL injection.
CVE-2024-22120
Zabbix server can perform command execution for configured scripts. Af ...
GHSA-625f-58w6-wj9f
Zabbix server can perform command execution for configured scripts. After command is executed, audit entry is added to "Audit Log". Due to "clientip" field is not sanitized, it is possible to injection SQL into "clientip" and exploit time based blind SQL injection.
BDU:2024-03942
Уязвимость сервера универсальной системы мониторинга Zabbix Workstation, связанная с ошибками при обработке входных данных, позволяющая нарушителю выполнить произвольный код
ROS-20240611-05
Уязвимость zabbix
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-22120 Zabbix server can perform command execution for configured scripts. After command is executed, audit entry is added to "Audit Log". Due to "clientip" field is not sanitized, it is possible to injection SQL into "clientip" and exploit time based blind SQL injection. | CVSS3: 9.1 | 77% Высокий | больше 2 лет назад |
 | CVE-2024-22120 Zabbix server can perform command execution for configured scripts. After command is executed, audit entry is added to "Audit Log". Due to "clientip" field is not sanitized, it is possible to injection SQL into "clientip" and exploit time based blind SQL injection. | CVSS3: 9.1 | 77% Высокий | больше 2 лет назад |
| CVE-2024-22120 Zabbix server can perform command execution for configured scripts. Af ... | CVSS3: 9.1 | 77% Высокий | больше 2 лет назад |
| GHSA-625f-58w6-wj9f Zabbix server can perform command execution for configured scripts. After command is executed, audit entry is added to "Audit Log". Due to "clientip" field is not sanitized, it is possible to injection SQL into "clientip" and exploit time based blind SQL injection. | CVSS3: 9.1 | 77% Высокий | больше 2 лет назад |
 | BDU:2024-03942 Уязвимость сервера универсальной системы мониторинга Zabbix Workstation, связанная с ошибками при обработке входных данных, позволяющая нарушителю выполнить произвольный код | CVSS3: 9.1 | 77% Высокий | больше 2 лет назад |
 | ROS-20240611-05 Уязвимость zabbix | CVSS3: 9.1 | 77% Высокий | больше 2 лет назад |
Уязвимостей на страницу