Login Request a demo
BI
DevOps
Bitbucket
by Atlassian · last CVE Oct 5, 2026
On CISA KEVExploited in the wild
22
CVEs
2
On KEV
9.9
Max CVSS
1
New 30D
Vulnerabilities22In the news8Timeline
Severity mix
Critical 5High 9Medium 8Low 0
Severity
All severities22Critical5High9Medium8Low0
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add Bitbucket to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-36804
In wildKEV
8.8
99%
Aug 25
Atlassian Bitbucket Server and Data Center Command Injection Vulnerability
Affected: 7.0.0 before unspecified; before 7.6.17; 7.7.0 before unspecified; before 7.17.10; 7.18.0 before unspecified; before 7.21.4; +8 more
CVE-2026-21589
In wildKEV
7.5
99%
Oct 5
Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
Affected: 4.6.0 through 8.14.6
CVE-2023-22513
8.8
15%
Sep 19
This High severity RCE (Remote Code Execution) vulnerability was introduced in version 8.0.0 of Bitbucket Data Center and Server
Affected: 8.9.0 before 8.9.5; 8.10.0 before 8.10.5; 8.11.0 before 8.11.4; 8.12.0 before 8.12.2; 8.13.0
CVE-2022-26137
8.8
2%
Jul 20
A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked when the application processes requests…
Affected: before 7.6.16; 7.7.0 before 7.17.8; 7.18.0 before 7.19.5; 7.20.0 before 7.20.2; 7.21.0 before 7.21.2; 8.0.0; +1 more
CVE-2019-20097
8.8
2%
Jan 15
Bitbucket Server and Bitbucket Data Center versions starting from 1.0.0 before 5.16.11, from version 6.0.0 before 6.0.11, from version 6.1.0 before 6.1.9, from version 6.2.0…
Affected: 1.0.0 before 5.6.11; 6.0.0 before 6.0.11; 6.1.0 before 6.1.9; 6.2.0 before 6.2.7; 6.3.0 before 6.3.6; 6.4.0 before 6.4.4; +5 more
CVE-2019-15012
8.8
2%
Jan 15
Bitbucket Server and Bitbucket Data Center from version 4.13
Affected: 4.13.0 before 5.6.11; 6.0.0 before 6.0.11; 6.1.0 before 6.1.9; 6.2.0 before 6.2.7; 6.3.0 before 6.3.6; 6.4.0 before 6.4.4; +5 more
CVE-2019-15010
8.8
3%
Jan 15
Bitbucket Server and Bitbucket Data Center versions starting from version 3.0.0 before version 5.16.11, from version 6.0.0 before 6.0.11, from version 6.1.0 before 6.1.9, from…
Affected: 3.0.0 before 5.6.11; 6.0.0 before 6.0.11; 6.1.0 before 6.1.9; 6.2.0 before 6.2.7; 6.3.0 before 6.3.6; 6.4.0 before 6.4.4; +5 more
CVE-2020-36233
7.8
0%
Feb 18
The Microsoft Windows Installer for Atlassian Bitbucket Server and Data Center before version 6.10.9, 7.x before 7.6.4, and from version 7.7.0 before 7.10.1 allows local attackers…
Affected: before 6.10.9; 7.0.0 before 7.6.4; 7.7.0 before 7.10.1
CVE-2017-18087
7.5
2%
Feb 15
The download commit resource in Atlassian Bitbucket Server from version 5.1.0 before version 5.1.7, from version 5.2.0 before version 5.2.5, from version 5.3.0 before version…
Affected: 5.1.0 before 5.1.7; 5.2.0 before 5.2.5; 5.3.0 before 5.3.3; after 5.4.0 before 5.4.1
Showing 9