Bitrix vulnerabilities

Products

• Bitrix24 6
• Site Manager 6

Newest

• bitrix bitrix24 Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100... CVE-2024-34891 6.8 MediumNovember 4, 2024
• bitrix bitrix24 Insufficiently protected credentials in AD/LDAP server settings in 1C-Bitrix Bitrix24 23.300.100... CVE-2024-34887 4.9 MediumNovember 4, 2024
• bitrix bitrix24 Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100... CVE-2024-34885 6.8 MediumNovember 4, 2024
• bitrix bitrix24 Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100... CVE-2024-34883 4.9 MediumNovember 4, 2024
• bitrix bitrix24 Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100... CVE-2024-34882 4.9 MediumNovember 4, 2024
• bitrix site manager, bitrix24 bitrix site manager +1 more Bitrix Site Manager Contact Form cross site scripting CVE-2017-20122 3.5 LowJune 30, 2022
• bitrix bitrix24 modules/security/classes/general.post_filter.php/post_filter.php in the Web Application Firewall... CVE-2020-13758 6.1 MediumJune 1, 2020
• bitrix mpbuilder Directory traversal vulnerability in the bitrix.mpbuilder module before 1.0.12 for Bitrix allows... CVE-2015-8358 Public exploit 9.0 HighDecember 16, 2015
• bitrix xscan Directory traversal vulnerability in the bitrix.xscan module before 1.0.4 for Bitrix allows... CVE-2015-8357 Public exploit 6.5 MediumDecember 16, 2015
• bitrix e-store module The Bitrix e-Store module before 14.0.1 for Bitrix Site Manager uses sequential values for the... CVE-2013-6788 7.5 HighMay 30, 2014
• bitrix site manager The Update functionality in Bitrix Site Manager 4.1.x does not verify the authenticity of... CVE-2006-2479 5.0 MediumMay 19, 2006
• bitrix site manager Bitrix Site Manager 4.1.x allows remote attackers to redirect users to other websites via a... CVE-2006-2478 5.0 MediumMay 19, 2006
• bitrix site manager Cross-site scripting (XSS) vulnerability in the administrative interface Bitrix Site Manager 4.1... CVE-2006-2477 4.9 MediumMay 19, 2006
• bitrix site manager Bitrix Site Manager 4.1.x stores updater.log under the web document root with insufficient access... CVE-2006-2476 5.0 MediumMay 19, 2006
• bitrix site manager PHP remote file inclusion vulnerability in start.php in Bitrix Site Manager 4.0.x allows remote... CVE-2005-1996 5.0 MediumJune 15, 2005
• bitrix site manager Bitrix Site Manager 4.0.x allows remote attackers to obtain sensitive information via direct... CVE-2005-1995 5.0 MediumJune 15, 2005