CVE
CVE-2024-22120
8.8
CVSScritical
Exploitable remotely over the internet · requires high privileges.
Description
Zabbix server can perform command execution for configured scripts. After command is executed, audit entry is added to "Audit Log". Due to "clientip" field is not sanitized, it is possible to injection SQL into "clientip" and exploit time based blind SQL injection.
Attack Vector
Network
Privileges Req.
High
User Interaction
None
zabbixzabbix_server
Updated Oct 12, 2026View on NVD →
This CVE is in S4E's catalog, but no public scanner is mapped to it yet.
CVE history: zabbix
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →