CVE catalog
CVE-2022-43515
zabbix: CVE-2022-43515
- Severity
- Low · CVSS 3.7
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 1.26% · Oct 25, 2026
Zabbix Frontend provides a feature that allows admins to maintain the installation and ensure that only certain IP addresses can access it. In this way, any user will not be able to access the Zabbix Frontend while it is being maintained and possible sensitive data will be prevented from being disclosed. An attacker can bypass this protection and access the instance using IP address not listed in the defined range.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | zabbix | sid | 1:7.0.29+dfsg-2 | fixed |
| Debian | zabbix | forky | 1:7.0.29+dfsg-2 | fixed |
| Debian | zabbix | trixie | 1:7.0.22+dfsg-1~deb13u1 | fixed |
| Debian | zabbix | bookworm | 1:6.0.14+dfsg-1 | fixed |
| Suse | zabbix | openstack cloud 9 | 4.0.12-4.21.1 | fixed |
| Suse | zabbix | openstack cloud crowbar 9 | 4.0.12-4.21.1 | fixed |
| Suse | zabbix | linux enterprise server for sap applications 12 sp4 | 4.0.12-4.21.1 | fixed |
| Suse | zabbix | linux enterprise server 12 sp3-bcl | 4.0.12-4.21.1 | fixed |
| Suse | zabbix | linux enterprise server 12 sp4-ltss | 4.0.12-4.21.1 | fixed |
| Suse | zabbix | linux enterprise server 12 sp5 | 4.0.12-4.21.1 | fixed |
| Suse | zabbix | linux enterprise server for sap applications 12 sp5 | 4.0.12-4.21.1 | fixed |
| Ubuntu | zabbix | pro | 1:5.0.8+dfsg-1build1 | vulnerable |
| Ubuntu | zabbix | pro | 1:5.0.14+dfsg-1 | vulnerable |
| Ubuntu | zabbix | pro | 1:5.0.17+dfsg-1 | vulnerable |
| Ubuntu | zabbix | pro | 1:5.0.17+dfsg-1ubuntu0.1~esm1 | vulnerable |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | zabbix | source | sid | 1:6.0.13+dfsg-1 | not yet assigned | Not reported | [1026847] |
| Debian | zabbix | source | forky | 1:6.0.13+dfsg-1 | not yet assigned | Not reported | [1026847] |
| Debian | zabbix | source | trixie | 1:6.0.13+dfsg-1 | not yet assigned | Not reported | [1026847] |
| Debian | zabbix | source | bookworm | 1:6.0.13+dfsg-1 | not yet assigned | Not reported | [1026847] |
| Suse | zabbix | rpm | openstack cloud 9 | 4.0.12-4.21.1 | Not reported | SUSE-SU-2022:4477-1 | Not reported |
| Suse | zabbix | rpm | openstack cloud crowbar 9 | 4.0.12-4.21.1 | Not reported | SUSE-SU-2022:4477-1 | Not reported |
| Suse | zabbix | rpm | linux enterprise server for sap applications 12 sp4 | 4.0.12-4.21.1 | Not reported | SUSE-SU-2022:4477-1 | Not reported |
| Suse | zabbix | rpm | linux enterprise server 12 sp3-bcl | 4.0.12-4.21.1 | Not reported | SUSE-SU-2022:4477-1 | Not reported |
| Suse | zabbix | rpm | linux enterprise server 12 sp4-ltss | 4.0.12-4.21.1 | Not reported | SUSE-SU-2022:4477-1 | Not reported |
| Suse | zabbix | rpm | linux enterprise server 12 sp5 | 4.0.12-4.21.1 | Not reported | SUSE-SU-2022:4477-1 | Not reported |
| Suse | zabbix | rpm | linux enterprise server for sap applications 12 sp5 | 4.0.12-4.21.1 | Not reported | SUSE-SU-2022:4477-1 | Not reported |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [zabbix-agent]Fixed
Source package: [zabbix]
Details (4)
1:6.0.14+dfsg-1+b1· amd64 · bookwormFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
1:6.0.14+dfsg-1+b1· arm64 · bookwormFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
- [zabbix-agent2]Fixed
Source package: [zabbix]
Details (4)
1:6.0.14+dfsg-1+b1· amd64 · bookwormFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
1:6.0.14+dfsg-1+b1· arm64 · bookwormFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
- [zabbix-frontend-php]Fixed
Source package: [zabbix]
Details (4)
1:6.0.14+dfsg-1· all · bookwormFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
1:6.0.14+dfsg-1· all · bookwormFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· all · bookworm-backportsFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· all · bookworm-backportsFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
- [zabbix-java-gateway]Fixed
Source package: [zabbix]
Details (4)
1:6.0.14+dfsg-1· all · bookwormFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
1:6.0.14+dfsg-1· all · bookwormFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· all · bookworm-backportsFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· all · bookworm-backportsFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
- [zabbix-proxy-mysql]Fixed
Source package: [zabbix]
Details (4)
1:6.0.14+dfsg-1+b1· amd64 · bookwormFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
1:6.0.14+dfsg-1+b1· arm64 · bookwormFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
- [zabbix-proxy-pgsql]Fixed
Source package: [zabbix]
Details (4)
1:6.0.14+dfsg-1+b1· amd64 · bookwormFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
1:6.0.14+dfsg-1+b1· arm64 · bookwormFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
- [zabbix-proxy-sqlite3]Fixed
Source package: [zabbix]
Details (4)
1:6.0.14+dfsg-1+b1· amd64 · bookwormFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
1:6.0.14+dfsg-1+b1· arm64 · bookwormFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
- [zabbix-sender]Fixed
Source package: [zabbix]
Details (2)
1:7.0.9+dfsg-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
- [zabbix-server-mysql]Fixed
Source package: [zabbix]
Details (4)
1:6.0.14+dfsg-1+b1· amd64 · bookwormFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
1:6.0.14+dfsg-1+b1· arm64 · bookwormFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
- [zabbix-server-pgsql]Fixed
Source package: [zabbix]
Details (4)
1:6.0.14+dfsg-1+b1· amd64 · bookwormFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
1:6.0.14+dfsg-1+b1· arm64 · bookwormFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
- [zabbix-web-service]Fixed
Source package: [zabbix]
Details (4)
1:6.0.14+dfsg-1+b1· amd64 · bookwormFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
1:6.0.14+dfsg-1+b1· arm64 · bookwormFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· amd64 · bookworm-backportsFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
1:7.0.9+dfsg-1~bpo12+1· arm64 · bookworm-backportsFixed · Fixed:
1:6.0.13+dfsg-1dsa · zabbix · debian · bookworm
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/suse-su-2022_4477-1.json]
- [https://osv.dev/vulnerability/SUSE-SU-2022:4477-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2022-43515]
- [https://security-tracker.debian.org/tracker/CVE-2022-43515]
- [https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2022-2236.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]