Approved changes feed: RSS · Atom

cpe:2.3:a:zabbix:zabbix:4.4.0:alpha1:*:*:*:*:*:*

part: a version: 4.4.0 update: alpha1

VendorZabbix (8857f8ff-2020-5e62-b9b7-687960752062)
ProductZabbix (ff27d8f3-5575-5d69-ac0d-7d8e9faa4e83)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/zabbix/zabbix-agent purl2cpe 2026-06-01 10:13:01.955772
pkg:github/zabbix/zabbix purl2cpe 2026-06-01 10:13:01.955774
pkg:rpm/fedora/zabbix purl2cpe 2026-06-01 10:13:01.955775
pkg:rpm/opensuse/zabbix purl2cpe 2026-06-01 10:13:01.955777
pkg:zabbix/zbx/zabbix purl2cpe 2026-06-01 10:13:01.955778

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-15132 vulnerable 2026-06-08 05:12:56.716404 Details available
Zabbix through 4.4.0alpha1 allows User Enumeration. With login requests, it is possible to enumerate application usernames based on the variability of server responses (e.g., the "Login name or password is incorrect" and "No permissions for system access" messages, or just blocking for a number of seconds). This affects both api_jsonrpc.php and index.php.
Published: 2019-08-17T00:00:00.000Z
Updated: 2024-08-05T00:34:53.334Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.