Threat database

3 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	5.5	EPSS 0.7%	CVE-2024-22119Zabbix · Improper Input Validation Medium5.5EPSS 0.7%2024-02-09CVE Database V5CVE-2024-22119 The cause of vulnerability is improper validation of form input field “Name” on Graph page in Items section. EPSS 0.7%Vulnerability #cwe-20 Germany+8	CVE Database V5	2024-02-09
Critical	9.1	KEVEPSS 95%	CVE-2022-23131Frontend · Zabbix Frontend Authentication Bypass Vulnerability Critical9.1KEVEPSS 95%2022-02-22CISA KEVCVE-2022-23131 CVE-2022-23131 is a high-severity vulnerability in the Zabbix Frontend that allows authentication bypass due to unsafe client-side session storage when SAML is configured. This flaw can lead to unauthorized access or takeover of the Zabbix instance. Exploitation of this vulnerability has been observed in the wild. KEVEPSS 95%Vulnerability Zabbix #exploited-in-the-wild	CISA KEV	2022-02-22
Low	3.7	KEVEPSS 95%	CVE-2022-23134Frontend · Zabbix Frontend Improper Access Control Vulnerability Low3.7KEVEPSS 95%2022-02-22CISA KEVCVE-2022-23134 CVE-2022-23134 is a high-severity vulnerability in the Zabbix Frontend that allows malicious actors to bypass step checks and potentially modify the frontend configuration. This improper access control issue has been exploited in the wild. No specific affected versions or patch information is provided. KEVEPSS 95%Vulnerability Zabbix #exploited-in-the-wild	CISA KEV	2022-02-22

Showing 1–3 of 3 results