Approved changes feed: RSS · Atom

cpe:2.3:a:zabbix:zabbix:7.4.0:-:*:*:*:*:*:*

part: a version: 7.4.0 update: -

VendorZabbix (8857f8ff-2020-5e62-b9b7-687960752062)
ProductZabbix (ff27d8f3-5575-5d69-ac0d-7d8e9faa4e83)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/zabbix/zabbix-agent purl2cpe 2026-06-01 10:13:01.959030
pkg:github/zabbix/zabbix purl2cpe 2026-06-01 10:13:01.959031
pkg:rpm/fedora/zabbix purl2cpe 2026-06-01 10:13:01.959033
pkg:rpm/opensuse/zabbix purl2cpe 2026-06-01 10:13:01.959034
pkg:zabbix/zbx/zabbix purl2cpe 2026-06-01 10:13:01.959035

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-27236 vulnerable 2026-06-08 07:14:54.556571 User information disclosure via api_jsonrpc.php on method user.get with param search
A regular Zabbix user can search other users in their user group via Zabbix API by select fields the user does not have access to view. This allows data-mining some field values the user does not have access to.
Published: 2025-10-03T11:28:09.810Z
Updated: 2025-10-03T13:52:36.578Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.