Login Request a demo
ZA
Product
Zabbix-agent2
by Zabbix · last CVE Dec 18, 2023
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 3High 0Medium 1Low 0
Severity
All severities4Critical3High0Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Zabbix-agent2 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-32728
9.8
1%
Dec 18
The Zabbix Agent 2 item key smart.disk.get does not sanitize its parameters before passing them to a shell command resulting possible vulnerability for remote code execution
Affected: 5.0.0 through 5.0.38; 6.0.0 through 6.0.23; 6.4.0 through 6.4.8; 7.0.0; 7.0.0; 7.0.0; +2 more
CVE-2023-29453
9.8
1%
Oct 12
Templates do not properly consider backticks (`) as Javascript string delimiters, and do not escape them as expected
Affected: 5.0.0 before 5.0.35; 6.0.0 before 6.0.18; 6.4.0 before 6.4.3
CVE-2022-22704
9.8
1%
Jan 6
The zabbix-agent2 package before 5.4.9-r1 for Alpine Linux sometimes allows privilege escalation to root because the design incorrectly expected that systemd would (in effect)…
Affected: before 5.4.9; 5.4.9
Showing 3