Zabbix Frontend

• CVE-2022-23134 Low 3.7 Exploited Possible view of the setup pages by unauthenticated users if config file already exists 95.3%
• CVE-2022-23131 Critical 9.1 Exploited Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML 95.7%
• CVE-2022-43515 Medium 5.3 X-Forwarded-For header is active by default causes access to Zabbix sites in maintenance mode 1.3%
• CVE-2022-40626 Medium 4.8 Reflected XSS in the backurl parameter of Zabbix Frontend 0.8%
• CVE-2022-35230 Low 3.7 Reflected XSS in graphs page of Zabbix Frontend 1.2%
• CVE-2022-35229 Low 3.7 Reflected XSS in discovery page of Zabbix Frontend 1.2%
• CVE-2022-24919 Low 3.7 Reflected XSS in graph configuration window of Zabbix Frontend 1.2%
• CVE-2022-24918 Low 3.7 Reflected XSS in item configuration window of Zabbix Frontend 1.2%
• CVE-2022-24917 Low 3.7 Reflected XSS in service configuration window of Zabbix Frontend 1.2%
• CVE-2022-24349 Medium 4.6 Reflected XSS in action configuration window of Zabbix Frontend 1.2%
• CVE-2022-23133 Medium 6.3 Stored XSS in host groups configuration window in Zabbix Frontend 1.1%