ZABBIX SUPPORT

Defect (Security)
Major
Created descending
1–5 of 41 as at: 2025 Jun 12 13:08
T Key Summary Assignee Reporter P Status Resolution Created Updated Due Development
Defect (Security) ZBX-26257

SQL injection in Zabbix API (CVE-2024-36465)

Zabbix Support Team Janis Nulle Major Closed Fixed  
Defect (Security) ZBX-26254

Reflected XSS vulnerability in /zabbix.php?action=export.valuemaps (CVE-2024-45699)

Zabbix Support Team Janis Nulle Major Closed Fixed  
Defect (Security) ZBX-26253

DoS vulnerability due to uncontrolled resource exhaustion (CVE-2024-45700)

Zabbix Support Team Janis Nulle Major Closed Fixed  
Defect (Security) ZBX-25635

Unauthenticated Zabbix frontend takeover when SSO is being used (CVE-2024-36466)

Zabbix Support Team Vjaceslavs Bogdanovs Major Closed Fixed  
Defect (Security) ZBX-25626

JS - Internal strings in HTTP headers (CVE-2024-42330)

Zabbix Support Team Vjaceslavs Bogdanovs Major Closed Fixed