Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2025-49643

An authenticated Zabbix user (including Guest) is able to cause disproportionate CPU load on the webserver by sending specially crafted parameters to /imgstore.php, leading to potential denial of service.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 26.1%
CVSS Severity
CVSS v3 Score 6.5
Products affected by CVE-2025-49643
  • Zabbix » Frontend » Version: 6.0.0
    cpe:2.3:a:zabbix:frontend:6.0.0
  • Zabbix » Frontend » Version: 6.0.11
    cpe:2.3:a:zabbix:frontend:6.0.11
  • Zabbix » Frontend » Version: 6.0.16
    cpe:2.3:a:zabbix:frontend:6.0.16
  • Zabbix » Frontend » Version: 6.0.17
    cpe:2.3:a:zabbix:frontend:6.0.17
  • Zabbix » Frontend » Version: 6.0.18
    cpe:2.3:a:zabbix:frontend:6.0.18
  • Zabbix » Frontend » Version: 7.0.0
    cpe:2.3:a:zabbix:frontend:7.0.0
  • Zabbix » Frontend » Version: 7.2.0
    cpe:2.3:a:zabbix:frontend:7.2.0
  • Zabbix » Frontend » Version: 7.4.0
    cpe:2.3:a:zabbix:frontend:7.4.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved