Execution time for an unsuccessful login differs when using a non-existing username compared to using an existing one.
CVSS Score
2.3
EPSS Score
0.003
Published
2025-04-02
A low privilege (regular) Zabbix user with API access can use SQL injection vulnerability in include/classes/api/CApiService.php to execute arbitrary SQL commands via the groupBy parameter.
CVSS Score
8.6
EPSS Score
0.399
Published
2025-04-02
Page 3