Vulnerabilities > Zabbix > Frontend > 6.4.0

DATE CVE VULNERABILITY TITLE RISK
2023-12-18 CVE-2023-32725 Reliance on Cookies without Validation and Integrity Checking vulnerability in Zabbix Frontend and Zabbix Server
The website configured in the URL widget will receive a session cookie when testing or executing scheduled reports.
network
low complexity
zabbix CWE-565
8.8
2023-08-03 CVE-2023-30958 Cross-site Scripting vulnerability in Zabbix Frontend
A security defect was identified in Foundry Frontend that enabled users to potentially conduct DOM XSS attacks if Foundry's CSP were to be bypassed. This defect was resolved with the release of Foundry Frontend 6.225.0.
network
low complexity
zabbix CWE-79
6.1
2023-07-13 CVE-2023-29456 Cross-site Scripting vulnerability in Zabbix Frontend
URL validation scheme receives input from a user and then parses it to identify its various components.
network
low complexity
zabbix CWE-79
5.4