{"schemaVersion":3,"id":"SUSE-SU-2026:0483-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for zabbix\n\nThis update for zabbix fixes the following issues:\n\n- CVE-2024-36469: Introduced clamping for mitigation of timing attacks. (bsc#1240676)\n- CVE-2024-42325: Restricted access to user fields using user.get API method for users of User and Admin type, and restricted access to alert entities using alert.get API method for users of User and Admin types. (bsc#1240678)","dates":{"published":"2026-02-12T16:34:19.000Z","modified":"2026-02-13T16:42:49.231Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"zabbix&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5","name":"zabbix","label":"zabbix&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/zabbix&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5","purlType":"rpm","versions":[{"text":"< 4.0.12-4.45.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.12-4.45.1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260483-1/","label":"www.suse.com/support/update/announcement/2026/suse-su-20260483-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1240676","label":"bugzilla.suse.com/1240676","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1240678","label":"bugzilla.suse.com/1240678","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2024-36469","label":"www.suse.com/security/cve/CVE-2024-36469","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42325","label":"www.suse.com/security/cve/CVE-2024-42325","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2024-36469","CVE-2024-42325"],"downstream":[],"duplicates":[],"related":["CVE-2024-36469","CVE-2024-42325"]},"timeline":[{"kind":"published","date":"2026-02-12T16:34:19.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-13T16:42:49.231Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T15:30:59.613Z","stale":false,"partial":false}}