BD
Product
Bitbucket Data Center
On CISA KEVExploited in the wild
5
CVEs
2
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 1High 3Medium 1Low 0
Watch
Add Bitbucket Data Center to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-36804 In wildKEV | 8.8 | Aug 25 | Atlassian Bitbucket Server and Data Center Command Injection Vulnerability Affected: 7.0.0 before unspecified; before 7.6.17; 7.7.0 before unspecified; before 7.17.10; 7.18.0 before unspecified; before 7.21.4; +8 more |
| CVE-2026-21589 In wildKEV | 7.5 | Oct 5 | Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability Affected: All other versions |
| CVE-2022-26133 | 9.8 | Apr 20 | SharedSecretClusterAuthenticator in Atlassian Bitbucket Data Center versions 5.14.0 and later before 7.6.14, 7.7.0 and later prior to 7.17.6, 7.18.0 and later prior to 7.18.4,… Affected: 5.14.0 before 7.6.14; 7.7.0 before 7.17.6; 7.18.0 before 7.18.4; 7.19.0 before 7.19.4; 7.20.0 |
| CVE-2023-22513 | 8.8 | Sep 19 | This High severity RCE (Remote Code Execution) vulnerability was introduced in version 8.0.0 of Bitbucket Data Center and Server Affected: 8.9.0 before 8.9.5; 8.10.0 before 8.10.5; 8.11.0 before 8.11.4; 8.12.0 before 8.12.2; 8.13.0 |
| CVE-2024-21684 | 4.3 | Jul 24 | There is a low severity open redirect vulnerability within affected versions of Bitbucket Data Center Affected: 8.0.0 before 8.9.13; 8.19.0 before 8.19.2 |
Showing 5