UpHeron
All vulnerabilities

Servers and applications

CVE-2020-15803

Zabbix before 3.0.32rc1, 4.x before 4.0.22rc1, 4.1.x through 4.4.x before 4.4.10rc1, and 5.x before 5.0.2rc1 allows stored XSS in the URL Widget.

Severity
Medium 6.1
Published
17 Jul 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
ZabbixServers and applications · cpe:a:zabbix:zabbix
  • Version 5.0.2
  • Version 5.0.2-rc1
  • From 5.0.0 up to 5.0.1
  • Version 4.4.10
All 11 release lines
  • Every version up to 3.0.31
  • Version 3.0.32-rc1
  • From 4.0.0 up to 4.0.21
  • Version 4.0.22-rc1
  • Version 4.0.22
  • From 4.4 up to 4.4.9
  • Version 4.4.10-rc1
  • Version 4.4.10
  • From 5.0.0 up to 5.0.1
  • Version 5.0.2-rc1
  • Version 5.0.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-15803
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-15803