CVE-2020-11800
First published: Wed Oct 07 2020(Updated: )
Zabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2 allows remote attackers to execute arbitrary code.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Zabbix Zabbix | >=2.2.0<3.0.31 | |
| Zabbix Zabbix | =3.2.0 | |
| openSUSE Backports SLE | =15.0-sp1 | |
| openSUSE Backports SLE | =15.0-sp2 | |
| openSUSE Leap | =15.1 | |
| openSUSE Leap | =15.2 | |
| Debian Debian Linux | =9.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for Zabbix Server?
The vulnerability ID for Zabbix Server is CVE-2020-11800.
What is the severity level of CVE-2020-11800?
The severity level of CVE-2020-11800 is critical with a score of 9.8.
Which versions of Zabbix Server are affected by CVE-2020-11800?
Zabbix Server 2.2.x, 3.0.x (before 3.0.31), and 3.2 are affected by CVE-2020-11800.
How can remote attackers exploit CVE-2020-11800?
Remote attackers can exploit CVE-2020-11800 to execute arbitrary code.
Where can I find more information about CVE-2020-11800?
You can find more information about CVE-2020-11800 at the following references: [link1](http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00007.html), [link2](https://lists.debian.org/debian-lts-announce/2020/11/msg00039.html), [link3](https://support.zabbix.com/browse/DEV-1538).
- collector/nvd-index
- vendor/zabbix
- canonical/zabbix zabbix
- version/zabbix zabbix/2.2.0
- version/zabbix zabbix/3.2.0
- vendor/opensuse
- canonical/opensuse backports sle
- version/opensuse backports sle/15.0-sp1
- version/opensuse backports sle/15.0-sp2
- canonical/opensuse leap
- version/opensuse leap/15.1
- version/opensuse leap/15.2
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/9.0