GCVE - cpe:2.3:a:zabbix:zabbix:1.8.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:zabbix:zabbix:1.8.4:*:*:*:*:*:*:*

part: a version: 1.8.4 update: *

Vendor	Zabbix (`8857f8ff-2020-5e62-b9b7-687960752062`)
Product	Zabbix (`ff27d8f3-5575-5d69-ac0d-7d8e9faa4e83`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-3005`	vulnerable	2026-06-08 05:05:30.618244	Details available XML external entity (XXE) vulnerability in Zabbix 1.8.x before 1.8.21rc1, 2.0.x before 2.0.13rc1, 2.2.x before 2.2.5rc1, and 2.3.x before 2.3.2 allows remote attackers to read arbitrary files or potentially execute arbitrary code via a crafted DTD in an XML request. Published: 2018-02-01T17:00:00.000Z Updated: 2024-08-06T10:28:46.259Z Open on db.gcve.eu Reference links http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134885.html http://www.securityfocus.com/bid/68075 https://support.zabbix.com/browse/ZBX-8151 http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134909.html http://seclists.org/fulldisclosure/2014/Jun/87	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-5027`	vulnerable	2026-06-08 04:59:34.212907	Details available Cross-site scripting (XSS) vulnerability in ZABBIX before 1.8.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the profiler. Published: 2011-12-29T22:00:00.000Z Updated: 2024-08-07T00:23:39.389Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/51093 http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071660.html https://support.zabbix.com/browse/ZBX-4015 http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071687.html http://osvdb.org/77772	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-4674`	vulnerable	2026-06-08 04:59:32.550509	Details available SQL injection vulnerability in popup.php in Zabbix 1.8.3 and 1.8.4, and possibly other versions before 1.8.9, allows remote attackers to execute arbitrary SQL commands via the only_hostid parameter. Published: 2011-12-02T18:00:00.000Z Updated: 2024-08-07T00:09:19.400Z Open on db.gcve.eu Reference links http://www.exploit-db.com/exploits/18155 https://support.zabbix.com/browse/ZBX-4385 https://exchange.xforce.ibmcloud.com/vulnerabilities/71479 http://www.securityfocus.com/bid/50803	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-4615`	vulnerable	2026-06-08 04:59:32.300833	Details available Multiple cross-site scripting (XSS) vulnerabilities in Zabbix before 1.8.10 allow remote attackers to inject arbitrary web script or HTML via the gname parameter (aka host groups name) to (1) hostgroups.php and (2) usergrps.php, the update action to (3) hosts.php and (4) scripts.php, and (5) maintenance.php. Published: 2011-12-29T22:00:00.000Z Updated: 2024-08-07T00:09:19.538Z Open on db.gcve.eu Reference links http://osvdb.org/77771 http://www.securityfocus.com/bid/51093 http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071660.html https://support.zabbix.com/browse/ZBX-4015 http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071687.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3265`	vulnerable	2026-06-08 04:59:23.677509	Details available popup.php in Zabbix before 1.8.7 allows remote attackers to read the contents of arbitrary database tables via a modified srctbl parameter. Published: 2011-08-19T21:00:00.000Z Updated: 2024-08-06T23:29:56.536Z Open on db.gcve.eu Reference links https://support.zabbix.com/browse/ZBX-3840 http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066092.html http://www.securityfocus.com/bid/49277 https://support.zabbix.com/browse/ZBX-3955 https://exchange.xforce.ibmcloud.com/vulnerabilities/69376	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3264`	vulnerable	2026-06-08 04:59:23.675303	Details available Zabbix before 1.8.6 allows remote attackers to obtain sensitive information via an invalid srcfld2 parameter to popup.php, which reveals the installation path in an error message. Published: 2011-08-19T21:00:00.000Z Updated: 2024-08-06T23:29:56.401Z Open on db.gcve.eu Reference links https://support.zabbix.com/browse/ZBX-3840 http://www.zabbix.com/rn1.8.6.php https://exchange.xforce.ibmcloud.com/vulnerabilities/69377	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3263`	vulnerable	2026-06-08 04:59:23.667166	Details available zabbix_agentd in Zabbix before 1.8.6 and 1.9.x before 1.9.4 allows context-dependent attackers to cause a denial of service (CPU consumption) by executing the vfs.file.cksum command for a special device, as demonstrated by the /dev/urandom device. Published: 2011-08-19T21:00:00.000Z Updated: 2024-08-06T23:29:56.674Z Open on db.gcve.eu Reference links http://www.zabbix.com/rn1.8.6.php https://support.zabbix.com/browse/ZBX-3794 https://exchange.xforce.ibmcloud.com/vulnerabilities/69378	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2904`	vulnerable	2026-06-08 04:58:09.593164	Details available Cross-site scripting (XSS) vulnerability in acknow.php in Zabbix before 1.8.6 allows remote attackers to inject arbitrary web script or HTML via the backurl parameter. Published: 2011-08-19T21:00:00.000Z Updated: 2024-08-06T23:15:31.951Z Open on db.gcve.eu Reference links http://secunia.com/advisories/45502 http://www.securityfocus.com/bid/49016 http://www.openwall.com/lists/oss-security/2011/08/09/5 http://www.zabbix.com/rn1.8.6.php http://www.openwall.com/lists/oss-security/2011/08/08/2	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.