Approved changes feed: RSS · Atom

cpe:2.3:a:zabbix:zabbix_server:7.0.0:alpha1:*:*:*:*:*:*

part: a version: 7.0.0 update: alpha1

VendorZabbix (8857f8ff-2020-5e62-b9b7-687960752062)
ProductZabbix Server (e78164f6-c939-5a0e-bc65-a3f5a01c7cfb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-32727 vulnerable 2026-06-08 06:04:47.093665 Code execution vulnerability in icmpping
MEDIUM (6.8)
An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious command inside it to execute arbitrary code on the current Zabbix server.
Published: 2023-12-18T09:18:48.446Z
Updated: 2025-11-03T21:48:41.788Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32725 vulnerable 2026-06-08 06:04:47.086852 Leak of zbx_session cookie when using a scheduled report that includes a dashboard with a URL widget.
CRITICAL (9.6)
The website configured in the URL widget will receive a session cookie when testing or executing scheduled reports. The received session cookie can then be used to access the frontend as the particular user.
Published: 2023-12-18T09:15:23.931Z
Updated: 2024-08-02T15:25:36.630Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.