peter bassill · operator
$ cve CVE-2020-11800 JSON

CVE-2020-11800

9.8
CRITICAL · CVSS 3.1 · EPSS 9.2% (pctl 95)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

Description

Zabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2 allows remote attackers to execute arbitrary code.

Scoring

CVSS9.8 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS9.19% — more likely to be exploited than 95% of all CVEs
On CISA KEVno
Public exploitnone known
Published2020-10-07
Last modified2026-06-17

Affected (4)

VendorProduct
debiandebian linux
opensusebackports sle
opensuseleap
zabbixzabbix

References

→ the Explorer  ·  watch your stack  ·  NVD