BI
DevOps
Bitbucket
On CISA KEVExploited in the wild
22
CVEs
2
On KEV
9.9
Max CVSS
1
New 30D
Severity mix
Critical 5High 9Medium 8Low 0
Watch
Add Bitbucket to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-14171 | 6.5 | Jul 9 | Atlassian Bitbucket Server from version 4.9.0 before version 7.2.4 allows remote attackers to intercept unencrypted repository import requests via a Man-in-the-Middle (MITM)… Affected: 4.9.0 before 7.2.4 |
| CVE-2017-18037 | 6.5 | Feb 2 | The git repository tag rest resource in Atlassian Bitbucket Server from version 3.7.0 before 4.14.11 (the fixed version for 4.14.x), from version 5.0.0 before 5.0.9 (the fixed… Affected: 3.7.0 before 4.14.11; 5.0.0 before 5.0.9; 5.1.0 before 5.1.8; 5.2.0 before 5.2.6; 5.3.0 before 5.3.4; 5.4.0 before 5.4.2; +6 more |
| CVE-2017-18038 | 5.3 | Feb 2 | The repository settings resource in Atlassian Bitbucket Server before version 5.6.0 allows remote attackers to read the first line of arbitrary files via a path traversal… Affected: before 5.6.0 |
| CVE-2020-14170 | 4.3 | Jul 9 | Webhooks in Atlassian Bitbucket Server from version 5.4.0 before version 7.3.1 allow remote attackers to access the content of internal network resources via a Server-Side Request… Affected: 5.4.0 before 7.3.1 |
| CVE-2019-15005 | 4.3 | Nov 8 | The Atlassian Troubleshooting and Support Tools plugin prior to version 1.17.2 allows an unprivileged user to initiate periodic log scans and send the results to a user-specified… Affected: before 6.6.0 |
| CVE-2017-18088 | 4.3 | Feb 15 | Various plugin servlet resources in Atlassian Bitbucket Server before version 5.3.7 (the fixed version for 5.3.x), from version 5.4.0 before 5.4.6 (the fixed version for 5.4.x),… Affected: 5.3.0 before 5.3.7; 5.4.0 before 5.4.6; 5.5.0 before 5.5.6; 5.6.0 before 5.6.3; 5.7.0 before 5.7.1 |
| CVE-2017-18036 | 4.3 | Feb 2 | The Github repository importer in Atlassian Bitbucket Server before version 5.3.0 allows remote attackers to determine if a service they could not otherwise reach has open ports… Affected: before 5.3.0 |
| CVE-2016-4320 | 4.3 | Apr 10 | Atlassian Bitbucket Server before 4.7.1 allows remote attackers to read the first line of an arbitrary file via a directory traversal attack on the pull requests resource Affected: before 4.7.1 |
Showing 8