Bitrix Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

Not Defined	16

Product

Bitrix Site Manager	6
Bitrix Bitrix Site Manager	6
Bitrix Framework	2
Bitrix Bitrix e-Store module	2

Remediation

Official Fix	2
Temporary Fix	0
Workaround	0
Unavailable	6
Not Defined	8

Exploitability

High	0
Functional	0
Proof-of-Concept	10
Unproven	2
Not Defined	4

Access Vector

Not Defined	0
Physical	0
Local	2
Adjacent	0
Network	14

Authentication

Not Defined	0
High	0
Low	6
None	10

User Interaction

Not Defined	0
Required	4
None	12

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	2
≤5	4
≤6	8
≤7	0
≤8	2
≤9	0
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	4
≤5	8
≤6	2
≤7	2
≤8	0
≤9	0
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	6
≤5	2
≤6	6
≤7	0
≤8	2
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	2
≤8	0
≤9	0
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	2
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Vendor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	2
<2k	10
<5k	4
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Today

<1k	16
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Market Volume

🔴 CTI Activities

Affected Products (7): Bitrix24 (1), Bitrix Site Manager (6), Bitrix e-Store module (1), Framework (1), Site Manager (4), mpbuilder Module (1), xscan Module (1)

Published	Base	Temp	Vulnerability	Prod	Exp	Rem	EPSS	CTI	CVE
01/20/2023	4.6	4.5	1C-Bitrix Bitrix24 AD/LDAP ldap_server_edit.php insufficiently protected credentials	Unknown	Not Defined	Not Defined	0.00104	0.06	CVE-2022-43959
03/23/2022	7.3	7.0	Bitrix Site Manager Vote Module Remote Code Execution	Unknown	Not Defined	Official Fix	0.00668	0.04	CVE-2022-27228
12/02/2020	5.1	5.1	Bitrix Framework excessive authentication	Unknown	Not Defined	Not Defined	0.00284	0.03	CVE-2020-28206
01/31/2017	4.1	4.0	Bitrix Site Manager Contact Form cross site scripting	Unknown	Proof-of-Concept	Not Defined	0.00053	0.00	CVE-2017-20122
12/16/2015	7.2	6.5	Bitrix mpbuilder Module bitrix.mpbuilder_step2.php path traversal	Unknown	Proof-of-Concept	Official Fix	0.02667	0.04	CVE-2015-8358
12/16/2015	4.7	4.2	Bitrix xscan Module bitrix.xscan_worker.php path traversal	Unknown	Proof-of-Concept	Official Fix	0.02423	0.00	CVE-2015-8357
05/30/2014	7.3	7.0	Bitrix Bitrix e-Store module improper authentication	Unknown	Not Defined	Official Fix	0.00749	0.00	CVE-2013-6788
05/02/2008	5.3	4.7	Bitrix Site Manager redirect.php link following	Unknown	Unproven	Unavailable	0.00113	0.03	CVE-2008-2052
05/19/2006	5.3	4.8	Bitrix Bitrix Site Manager DNS Cache information disclosure	Unknown	Proof-of-Concept	Unavailable	0.01241	0.00	CVE-2006-2479
05/19/2006	4.6	4.4	Bitrix Bitrix Site Manager cross site scripting	Unknown	Proof-of-Concept	Unavailable	0.00337	0.03	CVE-2006-2477

5 more entries are not shown

🔒 Login Required

You need to signup and login to see more of the remaining 5 results.

◂ PreviousOverviewNext ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!