Количество 6
Количество 6
CVE-2024-22120
Zabbix server can perform command execution for configured scripts. After command is executed, audit entry is added to "Audit Log". Due to "clientip" field is not sanitized, it is possible to injection SQL into "clientip" and exploit time based blind SQL injection.
CVE-2024-22120
Zabbix server can perform command execution for configured scripts. After command is executed, audit entry is added to "Audit Log". Due to "clientip" field is not sanitized, it is possible to injection SQL into "clientip" and exploit time based blind SQL injection.
CVE-2024-22120
Zabbix server can perform command execution for configured scripts. Af ...
GHSA-625f-58w6-wj9f
Zabbix server can perform command execution for configured scripts. After command is executed, audit entry is added to "Audit Log". Due to "clientip" field is not sanitized, it is possible to injection SQL into "clientip" and exploit time based blind SQL injection.
BDU:2024-03942
Уязвимость сервера универсальной системы мониторинга Zabbix Workstation, связанная с ошибками при обработке входных данных, позволяющая нарушителю выполнить произвольный код
ROS-20240611-05
Уязвимость zabbix
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-22120 Zabbix server can perform command execution for configured scripts. After command is executed, audit entry is added to "Audit Log". Due to "clientip" field is not sanitized, it is possible to injection SQL into "clientip" and exploit time based blind SQL injection. | CVSS3: 9.1 | 93% Критический | больше 1 года назад |
 | CVE-2024-22120 Zabbix server can perform command execution for configured scripts. After command is executed, audit entry is added to "Audit Log". Due to "clientip" field is not sanitized, it is possible to injection SQL into "clientip" and exploit time based blind SQL injection. | CVSS3: 9.1 | 93% Критический | больше 1 года назад |
| CVE-2024-22120 Zabbix server can perform command execution for configured scripts. Af ... | CVSS3: 9.1 | 93% Критический | больше 1 года назад |
| GHSA-625f-58w6-wj9f Zabbix server can perform command execution for configured scripts. After command is executed, audit entry is added to "Audit Log". Due to "clientip" field is not sanitized, it is possible to injection SQL into "clientip" and exploit time based blind SQL injection. | CVSS3: 9.1 | 93% Критический | больше 1 года назад |
 | BDU:2024-03942 Уязвимость сервера универсальной системы мониторинга Zabbix Workstation, связанная с ошибками при обработке входных данных, позволяющая нарушителю выполнить произвольный код | CVSS3: 9.1 | 93% Критический | больше 1 года назад |
 | ROS-20240611-05 Уязвимость zabbix | CVSS3: 9.1 | 93% Критический | больше 1 года назад |
Уязвимостей на страницу