Bitrix24 vulnerabilities

Products

• Bitrix24 17
• Bitrix Site Manager 2

Newest

• bitrix bitrix24 Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100... CVE-2024-34891 6.8 MediumNovember 4, 2024
• bitrix bitrix24 Insufficiently protected credentials in AD/LDAP server settings in 1C-Bitrix Bitrix24 23.300.100... CVE-2024-34887 4.9 MediumNovember 4, 2024
• bitrix bitrix24 Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100... CVE-2024-34885 6.8 MediumNovember 4, 2024
• bitrix bitrix24 Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100... CVE-2024-34883 4.9 MediumNovember 4, 2024
• bitrix bitrix24 Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100... CVE-2024-34882 4.9 MediumNovember 4, 2024
• bitrix24 Bitrix24 Stored Cross-Site Scripting (XSS) via File Upload CVE-2023-1720 9.6 CriticalNovember 1, 2023
• bitrix24 Bitrix24 Insecure Global Variable Extraction CVE-2023-1719 7.5 HighNovember 1, 2023
• bitrix24 Bitrix24 Denial-of-Service (DoS) via Improper File Stream Access CVE-2023-1718 Public exploit EPSS 28.7% 7.5 HighNovember 1, 2023
• bitrix24 Bitrix24 Cross-Site Scripting (XSS) via Client-side Prototype Pollution CVE-2023-1717 9.6 CriticalNovember 1, 2023
• bitrix24 Bitrix24 Stored Cross-Site Scripting (XSS) via Improper Input Neutralization on Invoice Edit Page (2 of 2) CVE-2023-1716 9.0 CriticalNovember 1, 2023
• bitrix24 Bitrix24 Stored Cross-Site Scripting (XSS) via Improper Input Neutralization on Invoice Edit Page (1 of 2) CVE-2023-1715 9.0 CriticalNovember 1, 2023
• bitrix24 Bitrix24 Remote Command Execution (RCE) via Unsafe Variable Extraction CVE-2023-1714 8.8 HighNovember 1, 2023
• bitrix24 Bitrix24 Remote Command Execution (RCE) via Insecure Temporary File Creation CVE-2023-1713 8.8 HighNovember 1, 2023
• bitrix24 Insufficiently Protected Credentials in the AD/LDAP server settings in 1C-Bitrix Bitrix24 through... CVE-2022-43959 Public exploit 4.9 MediumJanuary 20, 2023
• bitrix site manager, bitrix24 bitrix site manager +1 more Bitrix Site Manager Contact Form cross site scripting CVE-2017-20122 3.5 LowJune 30, 2022
• bitrix24 In the vote (aka "Polls, Votes") module before 21.0.100 of Bitrix Site Manager, a remote... CVE-2022-27228 EPSS 20.8% 9.8 CriticalMarch 22, 2022
• bitrix24 bitrix framework An issue was discovered in Bitrix24 Bitrix Framework (1c site management) 20.0. An "User... CVE-2020-28206 6.5 MediumDecember 2, 2020
• bitrix24 The Web Application Firewall in Bitrix24 through 20.0.0 allows XSS via the items[ITEMS][ID]... CVE-2020-13483 6.1 MediumJune 24, 2020
• bitrix24 Bitrix24 through 20.0.975 allows SSRF via an intranet IP address in the services/main/ajax.php... CVE-2020-13484 9.8 CriticalJune 24, 2020
• bitrix24 bitrix site manager Open redirect vulnerability in redirect.php in Bitrix Site Manager 6.5 allows remote attackers to... CVE-2008-2052 6.1 MediumMay 2, 2008