CoreCVE

CVE Browser

Search and filter CVEs by severity, ecosystem, EPSS score, and more.

Today 75Last 7 days 2,843Total CVEs 401,205CISA KEV 1,731Critical 42,395 All stats
Clear
More filters (active)
Filters: Vendor: Bitrix24 Remove filter Clear all

Page 1

CVE-2024-34891 MEDIUM

Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to read Exchange account passwords vi…

CVSS 6.8 EPSS 0.29% Nov 4, 2024
CVE-2024-34887 MEDIUM

Insufficiently protected credentials in AD/LDAP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to send AD/LDAP administrators ac…

CVSS 6.8 EPSS 0.34% Nov 4, 2024
CVE-2024-34885 MEDIUM

Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to read SMTP accounts passwords via…

CVSS 6.8 EPSS 0.43% Nov 4, 2024
CVE-2024-34883 MEDIUM

Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allow remote administrators to read proxy-server accounts password…

CVSS 6.8 EPSS 0.38% Nov 4, 2024
CVE-2024-34882 MEDIUM

Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to send SMTP account passwords to an…

CVSS 6.8 EPSS 0.34% Nov 4, 2024
CVE-2023-1720 CRITICAL

Bitrix24 Stored Cross-Site Scripting (XSS) via File Upload

CVSS 9.6 EPSS 0.85% Nov 1, 2023
CVE-2023-1719 CRITICAL

Bitrix24 Insecure Global Variable Extraction

CVSS 9.8 EPSS 4.97% Nov 1, 2023
CVE-2023-1718 HIGH

Bitrix24 Denial-of-Service (DoS) via Improper File Stream Access

CVSS 7.5 EPSS 24.08% Nov 1, 2023
CVE-2023-1717 CRITICAL

Bitrix24 Cross-Site Scripting (XSS) via Client-side Prototype Pollution

CVSS 9.6 EPSS 1.05% Nov 1, 2023
CVE-2023-1716 CRITICAL

Bitrix24 Stored Cross-Site Scripting (XSS) via Improper Input Neutralization on Invoice Edit Page (2 of 2)

CVSS 9.6 EPSS 0.71% Nov 1, 2023
CVE-2023-1715 CRITICAL

Bitrix24 Stored Cross-Site Scripting (XSS) via Improper Input Neutralization on Invoice Edit Page (1 of 2)

CVSS 9.0 EPSS 0.59% Nov 1, 2023
CVE-2023-1714 HIGH

Bitrix24 Remote Command Execution (RCE) via Unsafe Variable Extraction

CVSS 8.8 EPSS 1.40% Nov 1, 2023
CVE-2023-1713 HIGH

Bitrix24 Remote Command Execution (RCE) via Insecure Temporary File Creation

CVSS 8.8 EPSS 1.23% Nov 1, 2023
CVE-2022-43959 MEDIUM

Insufficiently Protected Credentials in the AD/LDAP server settings in 1C-Bitrix Bitrix24 through 22.200.200 allow remote administrators to discover an AD/LDAP…

CVSS 4.9 EPSS 1.01% Jan 20, 2023
CVE-2017-20122 MEDIUM

Bitrix Site Manager Contact Form cross site scripting

CVSS 5.4 EPSS 0.54% Jun 30, 2022
CVE-2022-27228 CRITICAL

In the vote (aka "Polls, Votes") module before 21.0.100 of Bitrix Site Manager, a remote unauthenticated attacker can execute arbitrary code.

CVSS 9.8 EPSS 20.78% Mar 22, 2022
CVE-2020-28206 MEDIUM

An issue was discovered in Bitrix24 Bitrix Framework (1c site management) 20.0. An "User enumeration and Improper Restriction of Excessive Authentication Attem…

CVSS 6.5 EPSS 1.14% Dec 2, 2020
CVE-2020-13483 MEDIUM

The Web Application Firewall in Bitrix24 through 20.0.0 allows XSS via the items[ITEMS][ID] parameter to the components/bitrix/mobileapp.list/ajax.php/ URI.

CVSS 6.1 EPSS 4.51% Jun 24, 2020
CVE-2020-13484 CRITICAL

Bitrix24 through 20.0.975 allows SSRF via an intranet IP address in the services/main/ajax.php?action=attachUrlPreview url parameter, if the destination URL ho…

CVSS 9.8 EPSS 2.03% Jun 24, 2020
CVE-2008-2052 MEDIUM

Open redirect vulnerability in redirect.php in Bitrix Site Manager 6.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing at…

CVSS 6.1 EPSS 1.57% May 2, 2008

Showing 1 to 20 CVEs · page 1