BBitrix24

Products

Exploited and recent CVEs

• CVE-2023-1720 Critical 9.6 Bitrix24 Stored Cross-Site Scripting (XSS) via File Upload 1.1%
• CVE-2023-1719 High 7.5 Bitrix24 Insecure Global Variable Extraction 6.3%
• CVE-2023-1718 High 7.5 Bitrix24 Denial-of-Service (DoS) via Improper File Stream Access 28.7%
• CVE-2023-1717 Critical 9.6 Bitrix24 Cross-Site Scripting (XSS) via Client-side Prototype Pollution 1.5%
• CVE-2023-1716 Critical 9.0 Bitrix24 Stored Cross-Site Scripting (XSS) via Improper Input Neutralization on Invoice Edit Page (2 of 2) 0.8%
• CVE-2023-1715 Critical 9.0 Bitrix24 Stored Cross-Site Scripting (XSS) via Improper Input Neutralization on Invoice Edit Page (1 of 2) 0.7%
• CVE-2023-1714 High 8.8 Bitrix24 Remote Command Execution (RCE) via Unsafe Variable Extraction 1.8%
• CVE-2023-1713 High 8.8 Bitrix24 Remote Command Execution (RCE) via Insecure Temporary File Creation 1.6%