Sploitus

20 exploited vulnerabilities in Bitrix

Vulnerabilities with publicly known exploits

Vendors
1с, Bitrix, Microsoft
With known exploits
20
Affected bitrix24 versions
= 23.300.100
Affected Bitrix Project Bitrix versions
≀ 6.5.2

Vulnerabilities with exploits

Highest CVSS first β€” 1 of these already have exploit code on Sploitus

CVE-2023-1717
CVSS 10.0 CRITICAL 2023-11-01
CVE-2022-29268
CVSS 10.0 HIGH 2022-04-15
CVE-2022-27228
CVSS 10.0 CRITICAL 2022-03-04FIX AVAILABLE
CVE-2023-1719
CVSS 9.8 CRITICAL 2023-11-01
CVE-2020-13484
CVSS 9.8 CRITICAL 2020-06-24FIX AVAILABLE
CVE-2023-1716
CVSS 9.6 CRITICAL 2023-11-01
CVE-2023-1713
CVSS 9.0 HIGH 2023-11-01
CVE-2023-1715
CVSS 9.0 CRITICAL 2023-11-01
CVE-2023-1714
CVSS 9.0 HIGH 2023-11-01
CVE-2023-1718
CVSS 7.8 HIGH 2023-11-01
CVE-2024-34891
CVSS 6.8 MEDIUM 2024-04-23
CVE-2024-34885
CVSS 6.8 MEDIUM 2024-04-23
CVE-2020-13758
CVSS 6.1 MEDIUM 2020-06-01FIX AVAILABLE
CVE-2020-13483
CVSS 6.1 MEDIUM 2020-06-24FIX AVAILABLE
CVE-2015-8356 4 exploits
CVSS 6.0 MEDIUM 2017-04-14FIX AVAILABLE
mcart.xls Bitrix Module 6.5.2 - SQL Injectionmcart.xls Bitrix Module 6.5.2 - SQL Injection
CVE-2006-2479
CVSS 5.0 MEDIUM 2006-05-19FIX AVAILABLE
CVE-2006-2478
CVSS 5.0 MEDIUM 2006-05-19FIX AVAILABLE
CVE-2006-2476
CVSS 5.0 MEDIUM 2006-05-19FIX AVAILABLE
CVE-2022-43959
CVSS 4.9 MEDIUM 2023-01-20FIX AVAILABLE
CVE-2006-2477
CVSS 4.9 MEDIUM 2006-05-19FIX AVAILABLE