bitrix24
Security Risk Profile
40
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 20 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from May 2, 2008 to present
20
Total CVEs
10
Critical+High
0
Exploited
10
Unpatched
Threat Assessment
Avg CVSS
7.8
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
10
Critical/High
Risk Level
40/100
medium
Severity Distribution
Critical
7High
3Medium
10Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
5
2
Malicious File Upload
2
3
Infoleak
1
4
Input Validation
1
5
SSRF
1
Most Affected Products
1. Bitrix24 Bitrix2417
2. 1C-Bitrix Bitrix242
3. Bitrix24 Bitrix Site Manager2
4. Bitrix24 Bitrix Framework1
5. Bitrix Bitrix Site Manager1
Recent Vulnerabilities
See more →CVE-2024-34883
CVSS 6.8medium
11/4/2024🔧 No Patch
CVE-2024-34882
CVSS 6.8medium
11/4/2024🔧 No Patch
CVE-2024-34887
CVSS 6.8medium
11/4/2024🔧 No Patch
CVE-2024-34885
CVSS 6.8medium
11/4/2024🔧 No Patch
CVE-2024-34891
CVSS 6.8medium
11/4/2024🔧 No Patch
CVE-2023-1720
CVSS 9.6critical
Bitrix24 Stored Cross-Site Scripting (XSS) via File Upload
11/1/2023🔧 No Patch
CVE-2023-1719
CVSS 9.8critical
Bitrix24 Insecure Global Variable Extraction
11/1/2023🔧 No Patch
CVE-2023-1718
CVSS 7.5high
Bitrix24 Denial-of-Service (DoS) via Improper File Stream Access
11/1/2023🔧 No Patch
CVE-2023-1717
CVSS 9.6critical
Bitrix24 Cross-Site Scripting (XSS) via Client-side Prototype Pollution
11/1/2023🔧 No Patch
CVE-2023-1716
CVSS 9.6critical
Bitrix24 Stored Cross-Site Scripting (XSS) via Improper Input Neutralization on Invoice Edit Page (2 of 2)
11/1/2023🔧 No Patch
Monitor bitrix24 in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.