{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: Zabbix vulnerabilities","home_page_url":"https://patchfirst.co/vendor/zabbix/","feed_url":"https://patchfirst.co/feed/vendor/zabbix.json","description":"New and newly exploited Zabbix CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2024-42327","url":"https://patchfirst.co/cve/CVE-2024-42327/","title":"CVE-2024-42327: SQL injection in user.get API","content_text":"Zabbix · Zabbix. Not in CISA KEV. EPSS 79.1% (higher than 99.6% of CVEs). CVSS 9.9 CRITICAL. Public exploit code exists. Priority 31.8 of 100.","summary":"SQL injection in user.get API","date_published":"2024-11-27T00:00:00.000Z","date_modified":"2024-12-04T04:55:21.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":31.8,"kev":null,"epss":{"score":0.79105,"percentile":0.99597},"cvss":{"score":9.9,"severity":"CRITICAL","version":"3.1"},"vendor":"Zabbix","product":"Zabbix","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2024-22120","url":"https://patchfirst.co/cve/CVE-2024-22120/","title":"CVE-2024-22120: Time Based SQL Injection in Zabbix Server Audit Log","content_text":"Zabbix · Zabbix. Not in CISA KEV. EPSS 76.6% (higher than 99.54% of CVEs). CVSS 9.1 CRITICAL. Public exploit code exists. Priority 67.0 of 100.","summary":"Time Based SQL Injection in Zabbix Server Audit Log","date_published":"2024-05-17T00:00:00.000Z","date_modified":"2024-08-01T22:35:34.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":67,"kev":null,"epss":{"score":0.76618,"percentile":0.99543},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"Zabbix","product":"Zabbix","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2023-29452","url":"https://patchfirst.co/cve/CVE-2023-29452/","title":"CVE-2023-29452: Remove possibility to add html into Geomap attribution field","content_text":"Zabbix · Zabbix. Not in CISA KEV. EPSS 64.1% (higher than 99.22% of CVEs). CVSS 5.5 MEDIUM. Priority 23.7 of 100.","summary":"Remove possibility to add html into Geomap attribution field","date_published":"2023-07-13T00:00:00.000Z","date_modified":"2024-10-22T16:23:20.000Z","tags":[],"_patchfirst":{"reason":"published","priority":23.7,"kev":null,"epss":{"score":0.64063,"percentile":0.99225},"cvss":{"score":5.5,"severity":"MEDIUM","version":"3.1"},"vendor":"Zabbix","product":"Zabbix","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2022-23131#kev","url":"https://patchfirst.co/cve/CVE-2022-23131/","title":"[KEV] CVE-2022-23131: Zabbix Frontend Authentication Bypass Vulnerability","content_text":"Zabbix · Frontend. In CISA KEV since 2022-02-22. ENISA EUVD lists it as exploited. EPSS 95.7% (higher than 99.87% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1548 Abuse Elevation Control Mechanism; T1059 Command and Scripting Interpreter; T1078 Valid Accounts. Priority 69.8 of 100.","summary":"Zabbix Frontend Authentication Bypass Vulnerability","date_published":"2022-02-22T00:00:00.000Z","date_modified":"2026-06-17T04:29:34.000Z","tags":["kev","public-exploit","T1190","T1548","T1059","T1078"],"_patchfirst":{"reason":"kev","priority":69.8,"kev":{"dateAdded":"2022-02-22","ransomware":false},"epss":{"score":0.95683,"percentile":0.9987},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Zabbix","product":"Frontend","techniqueIds":["T1190","T1548","T1059","T1078"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-23134#kev","url":"https://patchfirst.co/cve/CVE-2022-23134/","title":"[KEV] CVE-2022-23134: Zabbix Frontend Improper Access Control Vulnerability","content_text":"Zabbix · Frontend. In CISA KEV since 2022-02-22. ENISA EUVD lists it as exploited. EPSS 95.3% (higher than 99.87% of CVEs). CVSS 5.3 MEDIUM. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1485 Data Destruction. Priority 66.7 of 100.","summary":"Zabbix Frontend Improper Access Control Vulnerability","date_published":"2022-02-22T00:00:00.000Z","date_modified":"2026-06-17T04:29:34.000Z","tags":["kev","public-exploit","T1190","T1485"],"_patchfirst":{"reason":"kev","priority":66.7,"kev":{"dateAdded":"2022-02-22","ransomware":false},"epss":{"score":0.9526,"percentile":0.99865},"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.1"},"vendor":"Zabbix","product":"Frontend","techniqueIds":["T1190","T1485"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2013-3628","url":"https://patchfirst.co/cve/CVE-2013-3628/","title":"CVE-2013-3628: Zabbix 2.0.9 has an Arbitrary Command Execution Vulnerability","content_text":"Zabbix · Zabbix. Not in CISA KEV. EPSS 67.5% (higher than 99.31% of CVEs). Public exploit code exists. Priority 24.9 of 100.","summary":"Zabbix 2.0.9 has an Arbitrary Command Execution Vulnerability","date_published":"2020-02-07T00:00:00.000Z","date_modified":"2024-08-06T16:14:56.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":24.9,"kev":null,"epss":{"score":0.67463,"percentile":0.99307},"cvss":null,"vendor":"Zabbix","product":"Zabbix","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}}]}