Possible view of the setup pages by unauthenticated users if config file already exists

Active agent heartbeat missing TLS check

JavaScript preprocessing memory disclosure

Stored XSS vulnerability in the Item history/Plain text widget

Stored XSS vulnerability in Host navigator widget maintenance tooltip

Host PSK extraction in Zabbix API

Frontend DoS via the validate.api.exists action

Agent 2 Oracle plugin TNS connection string injection via the 'service' parameter

Frontend DoS vulnerability due to asymmetric resource consumption

User information disclosure via api_jsonrpc.php on method user.get with param search

DoS vulnerability due to uncontrolled resource exhaustion

Zabbix Agent MSI Installer Allows Non-Admin User to Access Change Option via msiexec.exe

An unauthenticated user can create a link with reflected Javascript code inside the backurl parameter and send it to other authenticated users in order to create a fake account…

Zabbix before 3.0.32rc1, 4.x before 4.0.22rc1, 4.1.x through 4.4.x before 4.4.10rc1, and 5.x before 5.0.2rc1 allows stored XSS in the URL Widget

Zabbix before 2.2.21rc1, 3.x before 3.0.13rc1, 3.1.x and 3.2.x before 3.2.10rc1, and 3.3.x and 3.4.x before 3.4.4rc1 allows open redirect via the request parameter

Insufficient isolation of JavaScript (Duktape) execution context on Zabbix Server

Agent builds for AIX vulnerable to library loading hijacking

Stored XSS vulnerability in OAuth configuration form

Zabbix Agent 2 smartctl plugin argument injection in Zabbix 6.0 and later.

JS - Crash on empty HTTP server response

Prototype pollution leading to stored XSS

Reflected XSS vulnerability in /zabbix.php?action=export.valuemaps

The cause of vulnerability is improper validation of form input field “Name” on Graph page in Items section

A stored XSS has been found in the Zabbix web application in the Maps element if a URL field is set with spaces before URL

Currently, geomap configuration (Administration -> General -> Geographical maps) allows using HTML in the field “Attribution text” when selected “Other” Tile provider

An authenticated user can create a link with reflected Javascript code inside it for the graphs page and send it to other users

An authenticated user can create a link with reflected Javascript code inside it for the discovery page and send it to other users

An authenticated user can create a hosts group from the configuration with XSS payload, which will be available for other users

SNMP trap injection in zabbix_trap_receiver.pl

Unauthenticated arbitrary PHP class instantiation

Zabbix through 4.4.0alpha1 allows User Enumeration

Hidden host credentials inferable via multiselect.get filtering

Server DoS via JavaScript preprocessing or script items

Use-after-free read in script item/preprocessing HttpRequest body

Email media OAuth secret leak to Super Admin

Agent 2 Docker plugin arbitrary file read via Docker API injection

Frontend arbitrary file read in oauth.authorize action

LDAP 'Bind password' field value can be leaked by a Zabbix Super Admin

JavaScript preprocessing, webhooks and global scripts can cause uncontrolled CPU, memory, and disk I/O utilization

Use after free vulnerability in browser.c

Frontend plaintext macro value enumeration via the validatate.api.exists action

Insufficient permission check for the problem.view.refresh action

System Information Widget in Global View Dashboard exposes information about Hosts to Users without Permission