Approved changes feed: RSS · Atom

cpe:2.3:a:zabbix:zabbix:2.2.10:*:*:*:*:*:*:*

part: a version: 2.2.10 update: *

VendorZabbix (8857f8ff-2020-5e62-b9b7-687960752062)
ProductZabbix (ff27d8f3-5575-5d69-ac0d-7d8e9faa4e83)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/zabbix/zabbix-agent purl2cpe 2026-06-01 10:13:01.953023
pkg:github/zabbix/zabbix purl2cpe 2026-06-01 10:13:01.953025
pkg:rpm/fedora/zabbix purl2cpe 2026-06-01 10:13:01.953026
pkg:rpm/opensuse/zabbix purl2cpe 2026-06-01 10:13:01.953028
pkg:zabbix/zbx/zabbix purl2cpe 2026-06-01 10:13:01.953029

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-4338 vulnerable 2026-06-08 05:07:47.177116 Details available
The mysql user parameter configuration script (userparameter_mysql.conf) in the agent in Zabbix before 2.0.18, 2.2.x before 2.2.13, and 3.0.x before 3.0.3, when used with a shell other than bash, allows context-dependent attackers to execute arbitrary code or SQL commands via the mysql.size parameter.
Published: 2017-01-23T21:00:00.000Z
Updated: 2024-08-06T00:25:14.512Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.