Vulnerabilities (CVE)

Filtered by vendor Zabbix Subscribe
Filtered by product Zabbix-agent2
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-32728 1 Zabbix 1 Zabbix-agent2 2023-12-22 N/A 9.8 CRITICAL
The Zabbix Agent 2 item key smart.disk.get does not sanitize its parameters before passing them to a shell command resulting possible vulnerability for remote code execution.
CVE-2022-22704 2 Alpinelinux, Zabbix 2 Alpine Linux, Zabbix-agent2 2023-08-08 10.0 HIGH 9.8 CRITICAL
The zabbix-agent2 package before 5.4.9-r1 for Alpine Linux sometimes allows privilege escalation to root because the design incorrectly expected that systemd would (in effect) determine part of the configuration.