| Max CVSS | 5.5 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2013-5572 | 3.5 |
Zabbix 2.0.5 allows remote authenticated users to discover the LDAP bind password by leveraging management-console access and reading the ldap_bind_password value in the HTML source code.
|
10-05-2014 - 03:58 | 01-10-2013 - 03:48 | |
| CVE-2014-1685 | 5.5 |
The Frontend in Zabbix before 1.8.20rc2, 2.0.x before 2.0.11rc2, and 2.2.x before 2.2.2rc1 allows remote "Zabbix Admin" users to modify the media of arbitrary users via unspecified vectors.
|
09-05-2014 - 16:46 | 08-05-2014 - 14:29 | |
| CVE-2014-1682 | 4.0 |
The API in Zabbix before 1.8.20rc1, 2.0.x before 2.0.11rc1, and 2.2.x before 2.2.2rc1 allows remote authenticated users to spoof arbitrary users via the user name in a user.login request.
|
09-05-2014 - 16:41 | 08-05-2014 - 14:29 |