Approved changes feed: RSS · Atom

cpe:2.3:a:zabbix:web_service_report_generation:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorZabbix (8857f8ff-2020-5e62-b9b7-687960752062)
ProductWeb Service Report Generation (ad57296b-c0bd-59fc-8378-d3ea8037a61b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/zabbix/zabbix-docker purl2cpe 2026-06-01 10:13:02.369683
pkg:golang/github.com/zabbix/zabbix-docker purl2cpe 2026-06-01 10:13:02.369685

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-46768 vulnerable 2026-06-08 05:50:39.407649 File name information disclosure vulnerability in Zabbix Web Service Report Generation
MEDIUM (5.9)
Arbitrary file read vulnerability exists in Zabbix Web Service Report Generation, which listens on the port 10053. The service does not have proper validation for URL parameters before reading the files.
Published: 2022-12-19T10:00:14.221Z
Updated: 2025-04-16T13:50:46.579Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.