Refine your search

5 vulnerabilities found for Zabbix by Zabbix

CERTFR-2025-AVI-0845
Vulnerability from certfr_avis

De multiples vulnérabilités ont été découvertes dans Zabbix. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données et un contournement de la politique de sécurité.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products
Vendor Product Description
Zabbix Zabbix Zabbix versions 6.0.x antérieures à 6.0.41
Zabbix Zabbix Zabbix versions 7.0.x antérieures à 7.0.18
Zabbix Zabbix Zabbix versions 7.4.x antérieures à 7.4.2
Zabbix Zabbix Zabbix versions 7.2.x antérieures à 7.2.12
References
Bulletin de sécurité Zabbix ZBX-27063 2025-10-03 vendor-advisory
Bulletin de sécurité Zabbix ZBX-27062 2025-10-03 vendor-advisory

Show details on source website


{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Zabbix versions 6.0.x ant\u00e9rieures \u00e0 6.0.41",
      "product": {
        "name": "Zabbix",
        "vendor": {
          "name": "Zabbix",
          "scada": false
        }
      }
    },
    {
      "description": "Zabbix versions 7.0.x ant\u00e9rieures \u00e0 7.0.18",
      "product": {
        "name": "Zabbix",
        "vendor": {
          "name": "Zabbix",
          "scada": false
        }
      }
    },
    {
      "description": "Zabbix versions 7.4.x ant\u00e9rieures \u00e0 7.4.2",
      "product": {
        "name": "Zabbix",
        "vendor": {
          "name": "Zabbix",
          "scada": false
        }
      }
    },
    {
      "description": "Zabbix versions 7.2.x ant\u00e9rieures \u00e0 7.2.12",
      "product": {
        "name": "Zabbix",
        "vendor": {
          "name": "Zabbix",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-27231",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-27231"
    },
    {
      "name": "CVE-2025-49641",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-49641"
    }
  ],
  "initial_release_date": "2025-10-06T00:00:00",
  "last_revision_date": "2025-10-06T00:00:00",
  "links": [],
  "reference": "CERTFR-2025-AVI-0845",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-10-06T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Zabbix. Elles permettent \u00e0 un attaquant de provoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un contournement de la politique de s\u00e9curit\u00e9.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Zabbix",
  "vendor_advisories": [
    {
      "published_at": "2025-10-03",
      "title": "Bulletin de s\u00e9curit\u00e9 Zabbix ZBX-27063",
      "url": "https://support.zabbix.com/browse/ZBX-27063"
    },
    {
      "published_at": "2025-10-03",
      "title": "Bulletin de s\u00e9curit\u00e9 Zabbix ZBX-27062",
      "url": "https://support.zabbix.com/browse/ZBX-27062"
    }
  ]
}

CERTFR-2025-AVI-0840
Vulnerability from certfr_avis

De multiples vulnérabilités ont été découvertes dans Zabbix. Elles permettent à un attaquant de provoquer une élévation de privilèges et une atteinte à la confidentialité des données.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products
Vendor Product Description
Zabbix Zabbix Zabbix versions 6.0.x antérieures à 6.0.41
Zabbix N/A Zabbix Agent versions 7.2.x antérieures à 7.2.12
Zabbix Zabbix Zabbix versions 7.0.x antérieures à 7.0.17
Zabbix Zabbix Zabbix versions 7.2.x antérieures à 7.2.11
Zabbix N/A Zabbix Agent versions 6.0.x antérieures à 6.0.41
Zabbix N/A Zabbix Agent versions 7.0.x antérieures à 7.0.18
Zabbix N/A Zabbix Agent versions 7.4.x antérieures à 7.4.2
Zabbix Zabbix Zabbix versions 7.4.x antérieures à 7.4.1
References
Bulletin de sécurité Zabbix ZBX-27060 2025-10-03 vendor-advisory
Bulletin de sécurité Zabbix ZBX-27061 2025-10-03 vendor-advisory

Show details on source website


{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Zabbix versions 6.0.x ant\u00e9rieures \u00e0 6.0.41",
      "product": {
        "name": "Zabbix",
        "vendor": {
          "name": "Zabbix",
          "scada": false
        }
      }
    },
    {
      "description": "Zabbix Agent versions 7.2.x ant\u00e9rieures \u00e0 7.2.12",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Zabbix",
          "scada": false
        }
      }
    },
    {
      "description": "Zabbix versions 7.0.x ant\u00e9rieures \u00e0 7.0.17",
      "product": {
        "name": "Zabbix",
        "vendor": {
          "name": "Zabbix",
          "scada": false
        }
      }
    },
    {
      "description": "Zabbix versions 7.2.x ant\u00e9rieures \u00e0 7.2.11",
      "product": {
        "name": "Zabbix",
        "vendor": {
          "name": "Zabbix",
          "scada": false
        }
      }
    },
    {
      "description": "Zabbix Agent versions 6.0.x ant\u00e9rieures \u00e0 6.0.41",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Zabbix",
          "scada": false
        }
      }
    },
    {
      "description": "Zabbix Agent versions 7.0.x ant\u00e9rieures \u00e0 7.0.18",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Zabbix",
          "scada": false
        }
      }
    },
    {
      "description": "Zabbix Agent versions 7.4.x ant\u00e9rieures \u00e0 7.4.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Zabbix",
          "scada": false
        }
      }
    },
    {
      "description": "Zabbix versions 7.4.x ant\u00e9rieures \u00e0 7.4.1",
      "product": {
        "name": "Zabbix",
        "vendor": {
          "name": "Zabbix",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-27236",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-27236"
    },
    {
      "name": "CVE-2025-27237",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-27237"
    }
  ],
  "initial_release_date": "2025-10-03T00:00:00",
  "last_revision_date": "2025-10-03T00:00:00",
  "links": [],
  "reference": "CERTFR-2025-AVI-0840",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-10-03T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Zabbix. Elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Zabbix",
  "vendor_advisories": [
    {
      "published_at": "2025-10-03",
      "title": "Bulletin de s\u00e9curit\u00e9 Zabbix ZBX-27060",
      "url": "https://support.zabbix.com/browse/ZBX-27060"
    },
    {
      "published_at": "2025-10-03",
      "title": "Bulletin de s\u00e9curit\u00e9 Zabbix ZBX-27061",
      "url": "https://support.zabbix.com/browse/ZBX-27061"
    }
  ]
}

CERTFR-2025-AVI-0786
Vulnerability from certfr_avis

De multiples vulnérabilités ont été découvertes dans Zabbix. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et une injection SQL (SQLi).

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products
Vendor Product Description
Zabbix N/A Greffon smartctl pour Zabbix Agent 2 versions 5.0.x antérieures à 5.0.47
Zabbix Zabbix Server version 7.2.x antérieures à 7.2.8
Zabbix N/A Greffon smartctl pour Zabbix Agent 2 versions 7.0.x antérieures à 7.0.11
Zabbix N/A Greffon smartctl pour Zabbix Agent 2 versions 7.2.x antérieures à 7.2.5
Zabbix Zabbix Server version 6.0.x antérieures à 6.0.34
Zabbix N/A Greffon smartctl pour Zabbix Agent 2 versions 6.0.x antérieures à 6.0.40
Zabbix Zabbix Server version 7.0.x antérieures à 7.0.14
Zabbix Zabbix Server version 6.4.x antérieures à 6.4.19
References
Bulletin de sécurité Zabbix ZBX-26986 2025-09-12 vendor-advisory
Bulletin de sécurité Zabbix ZBX-26988 2025-09-12 vendor-advisory
Bulletin de sécurité Zabbix ZBX-26985 2025-09-12 vendor-advisory
Bulletin de sécurité Zabbix ZBX-26987 2025-09-12 vendor-advisory

Show details on source website


{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Greffon smartctl pour Zabbix Agent 2 versions 5.0.x ant\u00e9rieures \u00e0 5.0.47",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Zabbix",
          "scada": false
        }
      }
    },
    {
      "description": "Server version 7.2.x ant\u00e9rieures \u00e0 7.2.8",
      "product": {
        "name": "Zabbix",
        "vendor": {
          "name": "Zabbix",
          "scada": false
        }
      }
    },
    {
      "description": "Greffon smartctl pour Zabbix Agent 2 versions 7.0.x ant\u00e9rieures \u00e0 7.0.11",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Zabbix",
          "scada": false
        }
      }
    },
    {
      "description": "Greffon smartctl pour Zabbix Agent 2 versions 7.2.x ant\u00e9rieures \u00e0 7.2.5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Zabbix",
          "scada": false
        }
      }
    },
    {
      "description": "Server version 6.0.x ant\u00e9rieures \u00e0 6.0.34",
      "product": {
        "name": "Zabbix",
        "vendor": {
          "name": "Zabbix",
          "scada": false
        }
      }
    },
    {
      "description": "Greffon smartctl pour Zabbix Agent 2 versions 6.0.x ant\u00e9rieures \u00e0 6.0.40",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Zabbix",
          "scada": false
        }
      }
    },
    {
      "description": "Server version 7.0.x ant\u00e9rieures \u00e0 7.0.14",
      "product": {
        "name": "Zabbix",
        "vendor": {
          "name": "Zabbix",
          "scada": false
        }
      }
    },
    {
      "description": "Server version 6.4.x ant\u00e9rieures \u00e0 6.4.19",
      "product": {
        "name": "Zabbix",
        "vendor": {
          "name": "Zabbix",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-27234",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-27234"
    },
    {
      "name": "CVE-2025-27240",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-27240"
    },
    {
      "name": "CVE-2025-27238",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-27238"
    },
    {
      "name": "CVE-2025-27233",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-27233"
    }
  ],
  "initial_release_date": "2025-09-12T00:00:00",
  "last_revision_date": "2025-09-12T00:00:00",
  "links": [],
  "reference": "CERTFR-2025-AVI-0786",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-09-12T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Injection SQL (SQLi)"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Zabbix. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une injection SQL (SQLi).",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Zabbix",
  "vendor_advisories": [
    {
      "published_at": "2025-09-12",
      "title": "Bulletin de s\u00e9curit\u00e9 Zabbix ZBX-26986",
      "url": "https://support.zabbix.com/browse/ZBX-26986"
    },
    {
      "published_at": "2025-09-12",
      "title": "Bulletin de s\u00e9curit\u00e9 Zabbix ZBX-26988",
      "url": "https://support.zabbix.com/browse/ZBX-26988"
    },
    {
      "published_at": "2025-09-12",
      "title": "Bulletin de s\u00e9curit\u00e9 Zabbix ZBX-26985",
      "url": "https://support.zabbix.com/browse/ZBX-26985"
    },
    {
      "published_at": "2025-09-12",
      "title": "Bulletin de s\u00e9curit\u00e9 Zabbix ZBX-26987",
      "url": "https://support.zabbix.com/browse/ZBX-26987"
    }
  ]
}

CERTFR-2025-AVI-0260
Vulnerability from certfr_avis

De multiples vulnérabilités ont été découvertes dans Zabbix. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une injection SQL (SQLi).

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products
Vendor Product Description
Zabbix Zabbix Zabbix versions 6.0.x antérieures à 6.0.39rc1
Zabbix Zabbix Zabbix versions 7.0.x antérieures à 7.0.10rc1
Zabbix Zabbix Zabbix versions 7.2.x antérieures à 7.2.4rc1
Zabbix Zabbix Zabbix versions 5.0.x antérieures à 5.0.46rc1
References
Bulletin de sécurité Zabbix ZBX-26257 2025-04-01 vendor-advisory
Bulletin de sécurité Zabbix ZBX-26258 2025-04-01 vendor-advisory
Bulletin de sécurité Zabbix ZBX-26255 2025-04-01 vendor-advisory
Bulletin de sécurité Zabbix ZBX-26254 2025-04-01 vendor-advisory
Bulletin de sécurité Zabbix ZBX-26253 2025-04-01 vendor-advisory

Show details on source website


{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Zabbix versions 6.0.x ant\u00e9rieures \u00e0 6.0.39rc1",
      "product": {
        "name": "Zabbix",
        "vendor": {
          "name": "Zabbix",
          "scada": false
        }
      }
    },
    {
      "description": "Zabbix versions 7.0.x ant\u00e9rieures \u00e0 7.0.10rc1",
      "product": {
        "name": "Zabbix",
        "vendor": {
          "name": "Zabbix",
          "scada": false
        }
      }
    },
    {
      "description": "Zabbix versions 7.2.x ant\u00e9rieures \u00e0 7.2.4rc1",
      "product": {
        "name": "Zabbix",
        "vendor": {
          "name": "Zabbix",
          "scada": false
        }
      }
    },
    {
      "description": "Zabbix versions 5.0.x ant\u00e9rieures \u00e0 5.0.46rc1",
      "product": {
        "name": "Zabbix",
        "vendor": {
          "name": "Zabbix",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-36465",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-36465"
    },
    {
      "name": "CVE-2024-42325",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-42325"
    },
    {
      "name": "CVE-2024-45700",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-45700"
    },
    {
      "name": "CVE-2024-45699",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-45699"
    },
    {
      "name": "CVE-2024-36469",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-36469"
    }
  ],
  "initial_release_date": "2025-04-01T00:00:00",
  "last_revision_date": "2025-04-01T00:00:00",
  "links": [],
  "reference": "CERTFR-2025-AVI-0260",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-04-01T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Injection SQL (SQLi)"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Zabbix. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une injection SQL (SQLi).",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Zabbix",
  "vendor_advisories": [
    {
      "published_at": "2025-04-01",
      "title": "Bulletin de s\u00e9curit\u00e9 Zabbix ZBX-26257",
      "url": "https://support.zabbix.com/browse/ZBX-26257"
    },
    {
      "published_at": "2025-04-01",
      "title": "Bulletin de s\u00e9curit\u00e9 Zabbix ZBX-26258",
      "url": "https://support.zabbix.com/browse/ZBX-26258"
    },
    {
      "published_at": "2025-04-01",
      "title": "Bulletin de s\u00e9curit\u00e9 Zabbix ZBX-26255",
      "url": "https://support.zabbix.com/browse/ZBX-26255"
    },
    {
      "published_at": "2025-04-01",
      "title": "Bulletin de s\u00e9curit\u00e9 Zabbix ZBX-26254",
      "url": "https://support.zabbix.com/browse/ZBX-26254"
    },
    {
      "published_at": "2025-04-01",
      "title": "Bulletin de s\u00e9curit\u00e9 Zabbix ZBX-26253",
      "url": "https://support.zabbix.com/browse/ZBX-26253"
    }
  ]
}

CERTFR-2024-AVI-1028
Vulnerability from certfr_avis

De multiples vulnérabilités ont été découvertes dans Zabbix. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products
Vendor Product Description
Zabbix Zabbix Zabbix versions 5.0.x antérieures à 5.0.43rc1
Zabbix Zabbix Zabbix versions 7.0.x antérieures à 7.0.4rc1
Zabbix Zabbix Zabbix versions 6.4.x antérieures à 6.4.20rc1
Zabbix Zabbix Zabbix versions 6.0.x antérieures à 6.0.35rc1
References
Bulletin de sécurité Zabbix ZBX-25610 2024-11-26 vendor-advisory
Bulletin de sécurité Zabbix ZBX-25630 2024-11-27 vendor-advisory
Bulletin de sécurité Zabbix ZBX-25626 2024-11-27 vendor-advisory
Bulletin de sécurité Zabbix ZBX-25625 2024-11-27 vendor-advisory
Bulletin de sécurité Zabbix ZBX-25611 2024-11-26 vendor-advisory
Bulletin de sécurité Zabbix ZBX-25624 2024-11-27 vendor-advisory
Bulletin de sécurité Zabbix ZBX-25627 2024-11-27 vendor-advisory
Bulletin de sécurité Zabbix ZBX-25621 2024-11-27 vendor-advisory
Bulletin de sécurité Zabbix ZBX-25622 2024-11-27 vendor-advisory
Bulletin de sécurité Zabbix ZBX-25614 2024-11-27 vendor-advisory
Bulletin de sécurité Zabbix ZBX-25628 2024-11-27 vendor-advisory
Bulletin de sécurité Zabbix ZBX-25629 2024-11-27 vendor-advisory
Bulletin de sécurité Zabbix ZBX-25635 2024-11-28 vendor-advisory
Bulletin de sécurité Zabbix ZBX-25623 2024-11-27 vendor-advisory

Show details on source website


{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Zabbix versions 5.0.x ant\u00e9rieures \u00e0 5.0.43rc1",
      "product": {
        "name": "Zabbix",
        "vendor": {
          "name": "Zabbix",
          "scada": false
        }
      }
    },
    {
      "description": "Zabbix versions 7.0.x ant\u00e9rieures \u00e0 7.0.4rc1",
      "product": {
        "name": "Zabbix",
        "vendor": {
          "name": "Zabbix",
          "scada": false
        }
      }
    },
    {
      "description": "Zabbix versions 6.4.x ant\u00e9rieures \u00e0 6.4.20rc1",
      "product": {
        "name": "Zabbix",
        "vendor": {
          "name": "Zabbix",
          "scada": false
        }
      }
    },
    {
      "description": "Zabbix versions 6.0.x ant\u00e9rieures \u00e0 6.0.35rc1",
      "product": {
        "name": "Zabbix",
        "vendor": {
          "name": "Zabbix",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-42329",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-42329"
    },
    {
      "name": "CVE-2024-42326",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-42326"
    },
    {
      "name": "CVE-2024-36468",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-36468"
    },
    {
      "name": "CVE-2024-22117",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-22117"
    },
    {
      "name": "CVE-2024-42331",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-42331"
    },
    {
      "name": "CVE-2024-36464",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-36464"
    },
    {
      "name": "CVE-2024-42332",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-42332"
    },
    {
      "name": "CVE-2024-42327",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-42327"
    },
    {
      "name": "CVE-2024-42333",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-42333"
    },
    {
      "name": "CVE-2024-36463",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-36463"
    },
    {
      "name": "CVE-2024-42328",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-42328"
    },
    {
      "name": "CVE-2024-36466",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-36466"
    },
    {
      "name": "CVE-2024-36467",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-36467"
    },
    {
      "name": "CVE-2024-42330",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-42330"
    }
  ],
  "initial_release_date": "2024-11-29T00:00:00",
  "last_revision_date": "2024-11-29T00:00:00",
  "links": [],
  "reference": "CERTFR-2024-AVI-1028",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-11-29T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Zabbix. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Zabbix",
  "vendor_advisories": [
    {
      "published_at": "2024-11-26",
      "title": "Bulletin de s\u00e9curit\u00e9 Zabbix ZBX-25610",
      "url": "https://support.zabbix.com/browse/ZBX-25610"
    },
    {
      "published_at": "2024-11-27",
      "title": "Bulletin de s\u00e9curit\u00e9 Zabbix ZBX-25630",
      "url": "https://support.zabbix.com/browse/ZBX-25630"
    },
    {
      "published_at": "2024-11-27",
      "title": "Bulletin de s\u00e9curit\u00e9 Zabbix ZBX-25626",
      "url": "https://support.zabbix.com/browse/ZBX-25626"
    },
    {
      "published_at": "2024-11-27",
      "title": "Bulletin de s\u00e9curit\u00e9 Zabbix ZBX-25625",
      "url": "https://support.zabbix.com/browse/ZBX-25625"
    },
    {
      "published_at": "2024-11-26",
      "title": "Bulletin de s\u00e9curit\u00e9 Zabbix ZBX-25611",
      "url": "https://support.zabbix.com/browse/ZBX-25611"
    },
    {
      "published_at": "2024-11-27",
      "title": "Bulletin de s\u00e9curit\u00e9 Zabbix ZBX-25624",
      "url": "https://support.zabbix.com/browse/ZBX-25624"
    },
    {
      "published_at": "2024-11-27",
      "title": "Bulletin de s\u00e9curit\u00e9 Zabbix ZBX-25627",
      "url": "https://support.zabbix.com/browse/ZBX-25627"
    },
    {
      "published_at": "2024-11-27",
      "title": "Bulletin de s\u00e9curit\u00e9 Zabbix ZBX-25621",
      "url": "https://support.zabbix.com/browse/ZBX-25621"
    },
    {
      "published_at": "2024-11-27",
      "title": "Bulletin de s\u00e9curit\u00e9 Zabbix ZBX-25622",
      "url": "https://support.zabbix.com/browse/ZBX-25622"
    },
    {
      "published_at": "2024-11-27",
      "title": "Bulletin de s\u00e9curit\u00e9 Zabbix ZBX-25614",
      "url": "https://support.zabbix.com/browse/ZBX-25614"
    },
    {
      "published_at": "2024-11-27",
      "title": "Bulletin de s\u00e9curit\u00e9 Zabbix ZBX-25628",
      "url": "https://support.zabbix.com/browse/ZBX-25628"
    },
    {
      "published_at": "2024-11-27",
      "title": "Bulletin de s\u00e9curit\u00e9 Zabbix ZBX-25629",
      "url": "https://support.zabbix.com/browse/ZBX-25629"
    },
    {
      "published_at": "2024-11-28",
      "title": "Bulletin de s\u00e9curit\u00e9 Zabbix ZBX-25635",
      "url": "https://support.zabbix.com/browse/ZBX-25635"
    },
    {
      "published_at": "2024-11-27",
      "title": "Bulletin de s\u00e9curit\u00e9 Zabbix ZBX-25623",
      "url": "https://support.zabbix.com/browse/ZBX-25623"
    }
  ]
}