Approved changes feed: RSS · Atom
cpe:2.3:a:zabbix:frontend:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Zabbix (8857f8ff-2020-5e62-b9b7-687960752062) |
|---|---|
| Product | Frontend (5b987336-2252-55a1-bc1d-b99eed86b319) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-49643 |
vulnerable | 2026-06-08 07:29:13.933168 |
Frontend DoS vulnerability due to asymmetric resource consumption
An authenticated Zabbix user (including Guest) is able to cause disproportionate CPU load on the webserver by sending specially crafted parameters to /imgstore.php, leading to potential denial of service.
Published: 2025-12-01T13:05:33.613Z
Updated: 2025-12-01T14:34:20.496Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27232 |
vulnerable | 2026-06-08 07:14:54.553922 |
Frontend arbitrary file read in oauth.authorize action
An authenticated Zabbix Super Admin can exploit the oauth.authorize action to read arbitrary files from the webserver leading to potential confidentiality loss.
Published: 2025-12-01T12:55:51.722Z
Updated: 2025-12-01T14:38:51.199Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42330 |
vulnerable | 2026-06-08 06:43:56.436711 |
JS - Internal strings in HTTP headers
CRITICAL (9.1)
The HttpRequest object allows to get the HTTP headers from the server's response after sending the request. The problem is that the returned strings are created directly from the data returned by the server and are not correctly encoded for JavaScript. This allows to create internal strings that can be used to access hidden properties of objects.
Published: 2024-11-27T12:05:47.722Z
Updated: 2025-11-03T22:04:43.106Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32725 |
vulnerable | 2026-06-08 06:04:47.088172 |
Leak of zbx_session cookie when using a scheduled report that includes a dashboard with a URL widget.
CRITICAL (9.6)
The website configured in the URL widget will receive a session cookie when testing or executing scheduled reports. The received session cookie can then be used to access the frontend as the particular user.
Published: 2023-12-18T09:15:23.931Z
Updated: 2024-08-02T15:25:36.630Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-30958 |
vulnerable | 2026-06-08 06:04:41.540654 |
DOM XSS in Developer mode dashboard via redirect GET parameter
MEDIUM (4.7)
A security defect was identified in Foundry Frontend that enabled users to potentially conduct DOM XSS attacks if Foundry's CSP were to be bypassed.
This defect was resolved with the release of Foundry Frontend 6.225.0.
Published: 2023-08-03T21:09:10.026Z
Updated: 2024-10-09T20:10:39.833Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29457 |
vulnerable | 2026-06-08 06:02:40.277448 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29456 |
vulnerable | 2026-06-08 06:02:40.276896 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29455 |
vulnerable | 2026-06-08 06:02:40.276466 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29454 |
vulnerable | 2026-06-08 06:02:40.275965 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43515 |
vulnerable | 2026-06-08 05:49:33.427491 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40626 |
vulnerable | 2026-06-08 05:48:27.759783 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35230 |
vulnerable | 2026-06-08 05:46:04.313497 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35229 |
vulnerable | 2026-06-08 05:46:04.310883 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24919 |
vulnerable | 2026-06-08 05:41:44.890257 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24918 |
vulnerable | 2026-06-08 05:41:44.889609 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24917 |
vulnerable | 2026-06-08 05:41:44.888436 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24349 |
vulnerable | 2026-06-08 05:41:00.174086 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23134 |
vulnerable | 2026-06-08 05:40:56.469255 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23133 |
vulnerable | 2026-06-08 05:40:56.468443 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23131 |
vulnerable | 2026-06-08 05:40:56.456844 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.