CVE-2022-46768
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2022
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
File name information disclosure vulnerability in Zabbix Web Service Report Generation
Arbitrary file read vulnerability exists in Zabbix Web Service Report Generation, which listens on the port 10053. The service does not have proper validation for URL parameters before reading the files.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Web Service Report Generation
- Vendor
- Zabbix
- Product
- Web Service Report Generation
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 6.0.0-6.0.11 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 6.2.0-6.2.5 | affected | Unavailable | Unavailable | Unavailable | None listed |
Zabbix agent 2 (MSI packages)
- Vendor
- Zabbix
- Product
- Zabbix agent 2 (MSI packages)
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 6.0.12rc1 | unaffected | custom | unspecified | Unavailable | None listed |
| 6.2.6rc1 | unaffected | custom | unspecified | Unavailable | None listed |