İçeriğe atla
Noroxi

Bitrix24 kayıtları

bitrix24 üreticisine ait 20 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
4
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 20
  2. 22
  3. 23
  4. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

20 kayıt
  • CVE-2022-27228
    45Planlayın

    In the vote (aka "Polls, Votes") module before 21.0.100 of Bitrix Site Manager, a remote unauthenticated attacker can execute arbitrary code

    KritikCVSS 9,8Kavram kanıtıEPSS %21

    bitrix24 · bitrix2422 Mar 2022

  • CVE-2023-1719
    40Planlayın

    Bitrix24 Insecure Global Variable Extraction

    KritikCVSS 9,8Kavram kanıtıEPSS %5

    bitrix24 · bitrix241 Kas 2023

  • CVE-2020-13484
    40Planlayın

    Bitrix24 through 20.0.975 allows SSRF via an intranet IP address in the services/main/ajax.php?action=attachUrlPreview url parameter, if the

    KritikCVSS 9,8İstismar yokEPSS %2

    bitrix24 · bitrix2424 Haz 2020

  • CVE-2023-1717
    38İzleyin

    Bitrix24 Cross-Site Scripting (XSS) via Client-side Prototype Pollution

    KritikCVSS 9,6İstismar yokEPSS %1

    bitrix24 · bitrix241 Kas 2023

  • CVE-2023-1716
    38İzleyin

    Bitrix24 Stored Cross-Site Scripting (XSS) via Improper Input Neutralization on Invoice Edit Page (2 of 2)

    KritikCVSS 9,6İstismar yokEPSS %1

    bitrix24 · bitrix241 Kas 2023

  • CVE-2023-1718
    37İzleyin

    Bitrix24 Denial-of-Service (DoS) via Improper File Stream Access

    YüksekCVSS 7,5Kavram kanıtıEPSS %24

    bitrix24 · bitrix241 Kas 2023

  • CVE-2023-1714
    35İzleyin

    Bitrix24 Remote Command Execution (RCE) via Unsafe Variable Extraction

    YüksekCVSS 8,8İstismar yokEPSS %1

    bitrix24 · bitrix241 Kas 2023

  • CVE-2023-1713
    35İzleyin

    Bitrix24 Remote Command Execution (RCE) via Insecure Temporary File Creation

    YüksekCVSS 8,8İstismar yokEPSS %1

    bitrix24 · bitrix241 Kas 2023

  • CVE-2023-1720
    32İzleyin

    Bitrix24 Stored Cross-Site Scripting (XSS) via File Upload

    YüksekCVSS 8,0İstismar yokEPSS %1

    bitrix24 · bitrix241 Kas 2023

  • CVE-2024-34885
    27İzleyin

    Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to read SMTP acco

    OrtaCVSS 6,8İstismar yokEPSS %0

    bitrix24 · bitrix244 Kas 2024

  • CVE-2024-34891
    27İzleyin

    Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to read Exchange a

    OrtaCVSS 6,8İstismar yokEPSS %0

    bitrix24 · bitrix244 Kas 2024

  • CVE-2020-28206
    26İzleyin

    An issue was discovered in Bitrix24 Bitrix Framework (1c site management) 20.0.

    OrtaCVSS 6,5İstismar yokEPSS %1

    bitrix24 · bitrix framework2 Ara 2020

  • CVE-2020-13483
    25İzleyin

    The Web Application Firewall in Bitrix24 through 20.0.0 allows XSS via the items[ITEMS][ID] parameter to the components/bitrix/mobileapp.lis

    OrtaCVSS 6,1Kavram kanıtıEPSS %5

    bitrix24 · bitrix2424 Haz 2020

  • CVE-2008-2052
    24İzleyin

    Open redirect vulnerability in redirect.php in Bitrix Site Manager 6.5 allows remote attackers to redirect users to arbitrary web sites and

    OrtaCVSS 6,1Kavram kanıtıEPSS %2

    bitrix24 · bitrix site manager2 May 2008

  • CVE-2023-1715
    21İzleyin

    Bitrix24 Stored Cross-Site Scripting (XSS) via Improper Input Neutralization on Invoice Edit Page (1 of 2)

    OrtaCVSS 5,4İstismar yokEPSS %1

    bitrix24 · bitrix241 Kas 2023

  • CVE-2017-20122
    21İzleyin

    Bitrix Site Manager Contact Form cross site scripting

    OrtaCVSS 5,4İstismar yokEPSS %1

    bitrix24 · bitrix site manager30 Haz 2022

  • CVE-2022-43959
    19İzleyin

    Insufficiently Protected Credentials in the AD/LDAP server settings in 1C-Bitrix Bitrix24 through 22.200.200 allow remote administrators to

    OrtaCVSS 4,9Kavram kanıtıEPSS %1

    bitrix24 · bitrix2420 Oca 2023

  • CVE-2024-34883
    19İzleyin

    Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allow remote administrators to read proxy-serve

    OrtaCVSS 4,9İstismar yokEPSS %0

    bitrix24 · bitrix244 Kas 2024

  • CVE-2024-34882
    19İzleyin

    Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to send SMTP acco

    OrtaCVSS 4,9İstismar yokEPSS %0

    bitrix24 · bitrix244 Kas 2024

  • CVE-2024-34887
    19İzleyin

    Insufficiently protected credentials in AD/LDAP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to send AD/LDA

    OrtaCVSS 4,9İstismar yokEPSS %0

    bitrix24 · bitrix244 Kas 2024