Frontend
- Software type
- Web application
- Total vulnerabilities (90 days)
- 0
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 10/19/2026, Frontend recorded 0 security vulnerabilities in the last 90 days, of which 0 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Frontend and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2025-49643Frontend DoS vulnerability due to asymmetric resource consumptionCVE-2025-27232Frontend arbitrary file read in oauth.authorize actionCVE-2024-42330JS - Internal strings in HTTP headersCVE-2023-32725Leak of zbx_session cookie when using a scheduled report that includes a dashboard with a URL widget.CVE-2023-30958DOM XSS in Developer mode dashboard via redirect GET parameter| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2025-49643Frontend DoS vulnerability due to asymmetric resource consumption | Exploitation statusNot exploited | FixYes |
| SeverityMedium |
CVE-2025-27232Frontend arbitrary file read in oauth.authorize action | Exploitation statusNot exploited | FixYes | Published12/01/2025 | SeverityMedium |
|---|
CVE-2024-42330JS - Internal strings in HTTP headers | Exploitation statusNot exploited | FixYes | Published11/27/2024 | SeverityCritical |
|---|
CVE-2023-32725Leak of zbx_session cookie when using a scheduled report that includes a dashboard with a URL widget. | Exploitation statusNot confirmed | FixYes | Published12/18/2023 | SeverityCritical |
|---|
CVE-2023-30958DOM XSS in Developer mode dashboard via redirect GET parameter | Exploitation statusNot exploited | FixYes | Published08/03/2023 | SeverityMedium |
|---|
CVE-2023-29457Insufficient validation of Action form input fields | Exploitation statusNot exploited | FixYes | Published07/13/2023 | SeverityMedium |
|---|
CVE-2023-29456Inefficient URL schema validation | Exploitation statusNot exploited | FixYes | Published07/13/2023 | SeverityMedium |
|---|
CVE-2023-29455Reflected XSS in several fields of graph form | Exploitation statusNot exploited | FixYes | Published07/13/2023 | SeverityMedium |
|---|
CVE-2023-29454Persistent XSS in the user form | Exploitation statusNot exploited | FixYes | Published07/13/2023 | SeverityMedium |
|---|
CVE-2022-43515X-Forwarded-For header is active by default causes access to Zabbix sites in maintenance mode | Exploitation statusActively exploited | FixYes | Published12/12/2022 | SeverityMedium |
|---|
20 Results | Page 1 of 2