Atlassian Bitbucket Data Center
14 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-21589 | All other versions | This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Ba | CRITICAL 9.3 | 99 % | KEV | |
| CVE-2024-21684 | 8.19.1 ; 8.9.0 to 8.9.12 ; 8.8.0 to 8.8.7 ; … | There is a low severity open redirect vulnerability within affected versions of Bitbucket Data Center. Versions of Bitbucket DC from 8.0.0 t | MEDIUM 4.3 | 0.2 % | ||
| CVE-2023-22513 | >= 8.0.0 ; >= 8.1.0 ; >= 8.10.0 ; … | This High severity RCE (Remote Code Execution) vulnerability was introduced in version 8.0.0 of Bitbucket Data Center and Server. This RCE ( | HIGH 8.8 | 15 % | ||
| CVE-2022-43781 | before 7.17.12 ; before 7.21.6 ; before 7.6.19 ; … | There is a command injection vulnerability using environment variables in Bitbucket Server and Data Center. An attacker with permission to c | CRITICAL 9.8 | 98 % | ||
| CVE-2022-36804 | 7.0.0 – < unspecified ; unspecified – < 7.6.17 ; 7.7.0 – < unspecified ; … | Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 before version 7.17.10, | HIGH 8.8 | 99 % | KEV | |
| CVE-2022-26137 | unspecified – < 7.6.16 ; 7.7.0 – < unspecified ; 7.16.0 – < unspecified ; … | A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked w | HIGH 8.8 | 2.4 % | ||
| CVE-2022-26136 | unspecified – < 7.6.16 ; 7.7.0 – < unspecified ; 7.16.0 – < unspecified ; … | A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third p | CRITICAL 9.8 | 5.7 % | ||
| CVE-2022-26133 | 5.14.0 – < unspecified ; unspecified – < 7.6.14 ; 7.7.0 – < unspecified ; … | SharedSecretClusterAuthenticator in Atlassian Bitbucket Data Center versions 5.14.0 and later before 7.6.14, 7.7.0 and later prior to 7.17.6 | CRITICAL 9.8 | 71 % | ||
| CVE-2020-36233 | unspecified – < 6.10.9 ; 7.0.0 – < unspecified ; unspecified – < 7.6.4 ; … | The Microsoft Windows Installer for Atlassian Bitbucket Server and Data Center before version 6.10.9, 7.x before 7.6.4, and from version 7.7 | HIGH 7.8 | 0.3 % | ||
| CVE-2019-20097 | 1.0 – < unspecified ; unspecified – < 5.16.11 ; 6.0 – < unspecified ; … | Bitbucket Server and Bitbucket Data Center versions starting from 1.0.0 before 5.16.11, from version 6.0.0 before 6.0.11, from version 6.1.0 | HIGH 8.8 | 2.5 % | ||
| CVE-2019-15012 | 4.13 – < unspecified ; unspecified – < 5.16.11 ; 6.0 – < unspecified ; … | Bitbucket Server and Bitbucket Data Center from version 4.13. before 5.16.11, from version 6.0.0 before 6.0.11, from version 6.1.0 before 6. | HIGH 8.8 | 1.6 % | ||
| CVE-2019-15010 | 3.0 – < unspecified ; unspecified – < 5.16.11 ; 6.0 – < unspecified ; … | Bitbucket Server and Bitbucket Data Center versions starting from version 3.0.0 before version 5.16.11, from version 6.0.0 before 6.0.11, fr | HIGH 8.8 | 2.6 % | ||
| CVE-2019-15000 | unspecified – < 5.16.10 ; 6.0.0 – < unspecified ; unspecified – < 6.0.10 ; … | The commit diff rest endpoint in Bitbucket Server and Data Center before 5.16.10 (the fixed version for 5.16.x ), from 6.0.0 before 6.0.10 ( | CRITICAL 9.8 | 7.8 % | ||
| CVE-2019-3397 | 5.13.0 – < unspecified ; unspecified – < 5.13.6 ; 5.14.0 – < unspecified ; … | Atlassian Bitbucket Data Center licensed instances starting with version 5.13.0 before 5.13.6 (the fixed version for 5.13.x), from 5.14.0 be | CRITICAL 9.1 | 4.4 % |