Bit Apps vulnerabilities
13 vulnerabilities
Known vulnerabilities in Bit Apps products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 5 products.
Products
5- Bit Form5 vulnerabilities
- Bit Form Pro4 vulnerabilities
- Bit Assist2 vulnerabilities
- Bit Integrations1 vulnerabilities
- Bit SMTP1 vulnerabilities
CVE-2025-68596bit appsbit assist+1
EPSS score0.27%
Missing Authorization vulnerability in Bit Apps Bit Assist bit-assist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bit Assist: from n/a through <= 1.5.11.CVE-2025-30834bit appsbit assist+1EPSS score0.54%
Path Traversal: '.../...//' vulnerability in Bit Apps Bit Assist bit-assist allows Path Traversal.This issue affects Bit Assist: from n/a through <= 1.5.4.CVE-2025-30885bit appsbit form+1EPSS score0.43%
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Bit Apps Bit Form bit-form allows Phishing.This issue affects Bit Form: from n/a through <= 2.18.0.CVE-2025-30884bit appsbit integrations+1EPSS score0.43%
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Bit Apps Bit Integrations bit-integrations allows Phishing.This issue affects Bit Integrations: from n/a through <= 2.4.10.CVE-2024-47301bit appsbit form+1EPSS score0.32%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bit Apps Bit Form bit-form allows Stored XSS.This issue affects Bit Form: from n/a through <= 2.13.10.CVE-2024-47319bit appsbit form+1EPSS score0.43%
Unrestricted Upload of File with Dangerous Type vulnerability in Bit Apps Bit Form bit-form.This issue affects Bit Form: from n/a through <= 2.13.10.CVE-2024-47335bit appsbit form+1EPSS score0.42%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bit Apps Bit Form bit-form allows SQL Injection.This issue affects Bit Form: from n/a through <= 2.13.11.CVE-2024-43249bit appsbit form pro+2EPSS score1.05%
Unrestricted Upload of File with Dangerous Type vulnerability in Bit Apps Bit Form Pro allows Command Injection.This issue affects Bit Form Pro: from n/a through 2.6.4.CVE-2024-43248bit appsbit form pro+2EPSS score0.59%
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bit Apps Bit Form Pro allows File Manipulation.This issue affects Bit Form Pro: from n/a through 2.6.4.CVE-2024-43250bit appsbit form pro+2EPSS score0.29%
Incorrect Authorization vulnerability in Bit Apps Bit Form Pro bitformpro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bit Form Pro: from n/a through 2.6.4.CVE-2024-43251bit appsbit form pro+2EPSS score0.42%
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Bit Apps Bit Form Pro.This issue affects Bit Form Pro: from n/a through 2.6.4.CVE-2026-25418bit appsbit form+1EPSS score0.31%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bit Apps Bit Form bit-form allows SQL Injection.This issue affects Bit Form: from n/a through <= 2.21.10.CVE-2026-32519bit appsbit smtp+1EPSS score0.37%
Incorrect Privilege Assignment vulnerability in Bit Apps Bit SMTP bit-smtp allows Privilege Escalation.This issue affects Bit SMTP: from n/a through <= 1.2.2.