Bitrix24 vulnerabilities
8 published CVEs name Bitrix24 among the affected products.
- 8Published CVEs8 of them scored
- 0Last 12 monthspublished in the last year
- 4Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2023-1720
Bitrix24 Stored Cross-Site Scripting (XSS) via File Upload
Bitrix24 · Bitrix24
Critical9.6 - CVE-2023-1719
Bitrix24 Insecure Global Variable Extraction
Bitrix24 · Bitrix24
High7.5 - CVE-2023-1718
Bitrix24 Denial-of-Service (DoS) via Improper File Stream Access
Bitrix24 · Bitrix24
High7.5 - CVE-2023-1717
Bitrix24 Cross-Site Scripting (XSS) via Client-side Prototype Pollution
Bitrix24 · Bitrix24
Critical9.6 - CVE-2023-1716
Bitrix24 Stored Cross-Site Scripting (XSS) via Improper Input Neutralization on Invoice Edit Page (2 of 2)
Bitrix24 · Bitrix24
Critical9.0 - CVE-2023-1715
Bitrix24 Stored Cross-Site Scripting (XSS) via Improper Input Neutralization on Invoice Edit Page (1 of 2)
Bitrix24 · Bitrix24
Critical9.0 - CVE-2023-1714
Bitrix24 Remote Command Execution (RCE) via Unsafe Variable Extraction
Bitrix24 · Bitrix24
High8.8 - CVE-2023-1713
Bitrix24 Remote Command Execution (RCE) via Insecure Temporary File Creation
Bitrix24 · Bitrix24
High8.8