Vulnerabilities > Zabbix > Frontend > 6.2.5

DATE CVE VULNERABILITY TITLE RISK
2023-08-03 CVE-2023-30958 Cross-site Scripting vulnerability in Zabbix Frontend
A security defect was identified in Foundry Frontend that enabled users to potentially conduct DOM XSS attacks if Foundry's CSP were to be bypassed. This defect was resolved with the release of Foundry Frontend 6.225.0.
network
low complexity
zabbix CWE-79
6.1
6.1
2022-12-05 CVE-2022-43515 Incorrect Authorization vulnerability in Zabbix Frontend
Zabbix Frontend provides a feature that allows admins to maintain the installation and ensure that only certain IP addresses can access it.
network
low complexity
zabbix CWE-863
critical
 9.8
9.8