Beveiligingsadvies

CVE-2026-23927

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-06 06:59:42

Laatst bijgewerkt 2026-05-06 13:00:17

Toegewezen door Zabbix

CVSS-score 5.1

Status PUBLISHED

Beschrijving

A user able to connect to Agent 2 can inject an Oracle TNS connection string via the 'service' parameter. This can lead to Agent 2 connecting to an attacker-controlled server and leaking Oracle database credentials if they are saved in a named session.

← Alle CVE's bekijken Bekijk op cve.org ↗