Approved changes feed: RSS · Atom

cpe:2.3:a:zabbix:zabbix:7.0.8:rc1:*:*:*:*:*:*

part: a version: 7.0.8 update: rc1

VendorZabbix (8857f8ff-2020-5e62-b9b7-687960752062)
ProductZabbix (ff27d8f3-5575-5d69-ac0d-7d8e9faa4e83)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/zabbix/zabbix-agent purl2cpe 2026-06-01 10:13:01.958787
pkg:github/zabbix/zabbix purl2cpe 2026-06-01 10:13:01.958788
pkg:rpm/fedora/zabbix purl2cpe 2026-06-01 10:13:01.958790
pkg:rpm/opensuse/zabbix purl2cpe 2026-06-01 10:13:01.958791
pkg:zabbix/zbx/zabbix purl2cpe 2026-06-01 10:13:01.958792

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-36465 vulnerable 2026-06-08 06:39:45.050418 SQL injection in Zabbix API
A low privilege (regular) Zabbix user with API access can use SQL injection vulnerability in include/classes/api/CApiService.php to execute arbitrary SQL commands via the groupBy parameter.
Published: 2025-04-02T06:11:26.928Z
Updated: 2025-04-02T15:09:28.836Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.