BI
DevOps
Bitbucket
On CISA KEVExploited in the wild
22
CVEs
2
On KEV
9.9
Max CVSS
1
New 30D
Severity mix
Critical 5High 9Medium 8Low 0
Watch
Add Bitbucket to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-5225 | 9.9 | Mar 22 | In browser editing in Atlassian Bitbucket Server from version 4.13.0 before 5.4.8 (the fixed version for 4.13.0 through 5.4.7), 5.5.0 before 5.5.8 (the fixed version for 5.5.x),… Affected: 4.13.0 before 5.4.8; after 5.5.0 before 5.5.8; 5.6.0 before 5.6.5; 5.7.0 before 5.7.3; 5.8.0 before 5.8.2 |
| CVE-2022-43781 | 9.8 | Nov 17 | There is a command injection vulnerability using environment variables in Bitbucket Server and Data Center Affected: 7.0.0 before 7.6.19; 7.7.0 before 7.17.12; 7.18.0 before 7.21.6; 7.22.0 before 8.0.5; 8.1.0 before 8.1.5; 8.2.0 before 8.2.4; +2 more |
| CVE-2022-26136 | 9.8 | Jul 20 | A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps Affected: before 7.6.16; 7.7.0 before 7.17.8; 7.18.0 before 7.19.5; 7.20.0 before 7.20.2; 7.21.0 before 7.21.2; 8.0.0; +1 more |
| CVE-2019-15000 | 9.8 | Sep 19 | The commit diff rest endpoint in Bitbucket Server and Data Center before 5.16.10 (the fixed version for 5.16.x ), from 6.0.0 before 6.0.10 (the fixed version for 6.0.x), from… Affected: 5.16.0 before 5.16.10; 6.0.0 before 6.0.10; 6.1.0 before 6.1.8; 6.2.0 before 6.2.6; 6.3.0 before 6.3.5; 6.4.0 before 6.4.3; +1 more |
| CVE-2019-3397 | 9.1 | Jun 3 | Atlassian Bitbucket Data Center licensed instances starting with version 5.13.0 before 5.13.6 (the fixed version for 5.13.x), from 5.14.0 before 5.14.4 (fixed version for 5.14.x),… Affected: 5.13.0 before 5.13.6; 5.14.0 before 5.14.4; 5.15.0 before 5.15.3; 5.16.0 before 5.16.3; 6.0.0 before 6.0.3; 6.1.0 before 6.1.2 |
Showing 5