{"id":"CVE-2014-3005","aliases":["DEBIAN-CVE-2014-3005","EUVD-2014-3027","GHSA-5xxv-j4hw-gp2p","MGASA-2014-0433","UBUNTU-CVE-2014-3005","USN-4767-1"],"status":"published","title":"XML external entity (XXE) vulnerability in Zabbix 1.8.x before 1.8.21rc1, 2.0.x before 2.0.13rc1,...","description":"XML external entity (XXE) vulnerability in Zabbix 1.8.x before 1.8.21rc1, 2.0.x before 2.0.13rc1, 2.2.x before 2.2.5rc1, and 2.3.x before 2.3.2 allows remote attackers to read arbitrary files or potentially execute arbitrary code via a crafted DTD in an XML request.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.06456,"percentile":0.93779,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-611"],"published":"2014-10-29T11:30:40Z","modified":"2026-10-23T16:00:43Z","fixes":[{"ecosystem":"Debian:12","package":"zabbix","fixed_in":["1:2.2.5+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"zabbix","fixed_in":["1:2.2.5+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"zabbix","fixed_in":["1:2.2.5+dfsg-1"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"zabbix","fixed_in":["2.0.13-1.mga3"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"zabbix","fixed_in":["2.0.13-1.mga4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"zabbix","fixed_in":["1:2.2.2+dfsg-1ubuntu1+esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"zabbix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.5+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"zabbix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.5+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"zabbix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.5+dfsg-1"}]}]},{"source":"osv","ecosystem":"Mageia:3","package":"zabbix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.13-1.mga3"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"zabbix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.13-1.mga4"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"zabbix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.2+dfsg-1ubuntu1+esm1"}]}],"versions":["1:2.0.6+dfsg-1ubuntu2","1:2.2.0+dfsg-1ubuntu1","1:2.2.0+dfsg-6ubuntu1","1:2.2.1+dfsg-1ubuntu3","1:2.2.2+dfsg-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"zabbix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.2+dfsg-1ubuntu1+esm4"}]}],"versions":["1:2.0.6+dfsg-1ubuntu2","1:2.2.0+dfsg-1ubuntu1","1:2.2.0+dfsg-6ubuntu1","1:2.2.1+dfsg-1ubuntu3","1:2.2.2+dfsg-1ubuntu1","1:2.2.2+dfsg-1ubuntu1+esm1","1:2.2.2+dfsg-1ubuntu1+esm3"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"zabbix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.7+dfsg-2ubuntu2.1+esm3"}]}],"versions":["1:2.4.6+dfsg-1","1:2.4.7+dfsg-1","1:2.4.7+dfsg-2","1:2.4.7+dfsg-2ubuntu2","1:2.4.7+dfsg-2ubuntu2.1","1:2.4.7+dfsg-2ubuntu2.1+esm1","1:2.4.7+dfsg-2ubuntu2.1+esm2"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"zabbix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.12+dfsg-1ubuntu0.1~esm3"}]}],"versions":["1:3.0.7+dfsg-3","1:3.0.12+dfsg-1","1:3.0.12+dfsg-1ubuntu0.1~esm1","1:3.0.12+dfsg-1ubuntu0.1~esm2"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"zabbix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.0.17+dfsg-1ubuntu0.1~esm1"}]}],"versions":["1:4.0.4+dfsg-1build2","1:4.0.4+dfsg-1build3","1:4.0.11+dfsg-1","1:4.0.14+dfsg-1","1:4.0.15+dfsg-1","1:4.0.16+dfsg-1","1:4.0.16+dfsg-1build1","1:4.0.17+dfsg-1"],"bundled":9}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"zabbix","product":"zabbix"}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134885.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/68075","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://support.zabbix.com/browse/ZBX-8151","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Patch","Vendor Advisory","advisory","evidence","fix","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134909.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Third Party Advisory","advisory"]},{"url":"http://seclists.org/fulldisclosure/2014/Jun/87","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Mailing List","Third Party Advisory","advisory","article","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1110496","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","advisory","report"]},{"url":"https://web.archive.org/web/20140622034155/http://www.pnigos.com:80/?p=273","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","advisory","evidence"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3005"},{"url":"https://github.com/advisories/GHSA-5xxv-j4hw-gp2p"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-3005","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2014-0433.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13628","tags":["report"]},{"url":"http://www.zabbix.com/rn2.0.12.php","tags":["web"]},{"url":"http://www.zabbix.com/rn2.0.13.php","tags":["web"]},{"url":"https://lists.fedoraproject.org/pipermail/package-announce/2014-June/134885.html","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2014-3005","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3005","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4767-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-4338","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-10134","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-10742","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-2824","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-2825","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-15132","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-11800","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-15803","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2014-3005","description":"XML external entity (XXE) vulnerability in Zabbix 1.8.x before 1.8.21rc1, 2.0.x before 2.0.13rc1, 2.2.x before 2.2.5rc1, and 2.3.x before 2.3.2 allows remote attackers to read arbitrary files or potentially execute arbitrary code via a crafted DTD in an XML request.","status":"published","published":"2018-02-01T17:00:00Z","modified":"2024-08-06T10:28:46.259Z","updated_at":"2026-11-02T14:33:44.569327Z"}],"euvd":[{"id":"EUVD-2014-3027","description":"XML external entity (XXE) vulnerability in Zabbix 1.8.x before 1.8.21rc1, 2.0.x before 2.0.13rc1, 2.2.x before 2.2.5rc1, and 2.3.x before 2.3.2 allows remote attackers to read arbitrary files or potentially execute arbitrary code via a crafted DTD in an XML request.","status":"published","published":"2018-02-01T17:00:00Z","modified":"2024-08-06T10:28:46Z","updated_at":"2026-11-03T01:57:12.660671Z"}],"ghsa":[{"id":"GHSA-5xxv-j4hw-gp2p","title":"XML external entity (XXE) vulnerability in Zabbix 1.8.x before 1.8.21rc1, 2.0.x before 2.0.13rc1,...","description":"XML external entity (XXE) vulnerability in Zabbix 1.8.x before 1.8.21rc1, 2.0.x before 2.0.13rc1, 2.2.x before 2.2.5rc1, and 2.3.x before 2.3.2 allows remote attackers to read arbitrary files or potentially execute arbitrary code via a crafted DTD in an XML request.","status":"published","published":"2022-05-14T03:44:10Z","modified":"2023-02-02T05:08:12Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-611"],"updated_at":"2026-11-02T14:52:41.978099Z"}],"nvd":[{"id":"CVE-2014-3005","description":"XML external entity (XXE) vulnerability in Zabbix 1.8.x before 1.8.21rc1, 2.0.x before 2.0.13rc1, 2.2.x before 2.2.5rc1, and 2.3.x before 2.3.2 allows remote attackers to read arbitrary files or potentially execute arbitrary code via a crafted DTD in an XML request.","status":"published","published":"2018-02-01T17:29:00.463Z","modified":"2026-06-17T00:07:27.663Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-611"],"updated_at":"2026-11-02T14:02:59.001778Z"}],"osv":[{"id":"CVE-2014-3005","description":"XML external entity (XXE) vulnerability in Zabbix 1.8.x before 1.8.21rc1, 2.0.x before 2.0.13rc1, 2.2.x before 2.2.5rc1, and 2.3.x before 2.3.2 allows remote attackers to read arbitrary files or potentially execute arbitrary code via a crafted DTD in an XML request.","status":"published","published":"2018-02-01T17:29:00Z","modified":"2026-04-16T06:23:33.460906056Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:43:59.654289Z"},{"id":"DEBIAN-CVE-2014-3005","description":"XML external entity (XXE) vulnerability in Zabbix 1.8.x before 1.8.21rc1, 2.0.x before 2.0.13rc1, 2.2.x before 2.2.5rc1, and 2.3.x before 2.3.2 allows remote attackers to read arbitrary files or potentially execute arbitrary code via a crafted DTD in an XML request.","status":"published","published":"2018-02-01T17:29:00.463Z","modified":"2026-10-23T16:00:43.066124409Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:26.134753Z"},{"id":"UBUNTU-CVE-2014-3005","description":"XML external entity (XXE) vulnerability in Zabbix 1.8.x before 1.8.21rc1, 2.0.x before 2.0.13rc1, 2.2.x before 2.2.5rc1, and 2.3.x before 2.3.2 allows remote attackers to read arbitrary files or potentially execute arbitrary code via a crafted DTD in an XML request.","status":"published","published":"2018-02-01T17:29:00Z","modified":"2026-02-04T03:50:29.940325Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:09.010095Z"},{"id":"MGASA-2014-0433","title":"Updated zabbix package fixes security vulnerability","description":"It was reported that the Zabbix frontend supported an XML data import feature,\nwhere on the server it used DOMDocument to parse the XML.  By default,\nDOMDocument also parses the external DTD, which could allow a remote attacker\nto use a crafted XML file causing Zabbix to read an arbitrary local file, and\nsend the contents of the specified file to a remote server (CVE-2014-3005).\n","status":"published","published":"2014-10-29T11:30:40Z","modified":"2026-04-16T06:24:46.973159476Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"USN-4767-1","title":"zabbix vulnerabilities","description":"Fu Chuang discovered that Zabbix did not properly parse IPs. A remote\nattacker could possibly use this issue to execute arbitrary code. This\nissue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and Ubuntu 18.04 ESM.\n(CVE-2020-11800)\n\nIt was discovered that Zabbix incorrectly handled certain requests. A\nremote attacker could possibly use this issue to execute arbitrary code.\nThis issue only affected Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.\n(CVE-2017-2824, CVE-2017-2825)\n\nIt was discovered that Zabbix incorrectly handled certain XML files. A\nremote attacker could possibly use this issue to read arbitrary files or\npotentially execute arbitrary code. This issue only affected\nUbuntu 14.04 ESM. (CVE-2014-3005)\n\nIt was discovered that Zabbix incorrectly handled certain inputs. A remote\nattacker could possibly use this issue to execute arbitrary SQL commands.\nThis issue only affected Ubuntu 14.04 ESM. (CVE-2016-10134, CVE-2016-4338)\n\nIt was discovered that Zabbix incorrectly handled the request parameter. A\nremote attacker could possibly use this issue to redirect requests to\nexternal links. This issue only affected Ubuntu 14.04 ESM and\nUbuntu 18.04 ESM. (CVE-2016-10742)\n\nIt was discovered that Zabbix incorrectly handled failed login attempts. A\nremote attacker could possibly use this issue to enumerate users.\n(CVE-2019-15132)\n\nIt was discovered that Zabbix did not properly validate input. A remote\nattacker could exploit this to conduct cross-site scripting (XSS) attacks.\nThis issue only affected Ubuntu 16.04 ESM, Ubuntu 18.04 ESM and\nUbuntu 20.04 ESM. (CVE-2020-15803)\n","status":"published","published":"2022-06-15T08:28:18Z","modified":"2026-06-29T13:48:11.851933517Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}