Zabbix Server vulnerabilities

3 vulnerabilities

Known vulnerabilities in Zabbix Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.1CVE-2017-2824debianzabbix+3
EPSS score
25.90%
An exploitable code execution vulnerability exists in the trapper command functionality of Zabbix Server 2.4.X. A specially crafted set of packets can cause a command injection resulting in remote code execution. An attacker can make requests from an active Zabbix Proxy to trigger this vulnerability.7.2CVE-2023-32727debianzabbix+8
EPSS score
0.87%
An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious command inside it to execute arbitrary code on the current Zabbix server.9.6CVE-2023-32725debianzabbix+3
EPSS score
0.85%
The website configured in the URL widget will receive a session cookie when testing or executing scheduled reports. The received session cookie can then be used to access the frontend as the particular user.