Bitrix

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Bitrix records in CISA KEV

No Bitrix vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Bitrix Site Manager 6 records LOW Bitrix24 1 record LOW Bitrix E-store Module 1 record LOW Mpbuilder 1 record MEDIUM Xscan 1 record MEDIUM

Records

1 record in Bitrix E-store Module · all components

TI-2013-05580 CVE-2013-6788 · GHSA-vwp6-m699-7h52

The Bitrix e-Store module before 14.0.1 for Bitrix Site Manager uses sequential values…

LOW 36

The Bitrix e-Store module before 14.0.1 for Bitrix Site Manager uses sequential values for the BITRIX_SM_SALE_UID cookie, which makes it easier for remote attackers to guess the cookie value and bypass authentication via…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01628 Published 2014-05-30 No fix listed CWE-287

Open these records in search →

Critical	1
High	1
Medium	9
Low	0
No CVSS	0