Atlassian Bitbucket Server vulnerabilities

CVEs per yearBy the year they were published

1. 20181
2. 20184
3. 20205
4. 20213
5. 20224
6. 20231

Known exploitedNewest addition to KEV first

• CVE-2022-36804

  Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 before version 7.17.10, from version…

  Atlassian · Bitbucket Server

  ExploitedHigh8.8

Newest CVEs

• CVE-2023-22513

  This High severity RCE (Remote Code Execution) vulnerability was introduced in version 8.0.0 of Bitbucket Data Center and Server. This RCE (Remote Code…

  Atlassian · Bitbucket Data Center

  High8.5
• CVE-2022-43781

  There is a command injection vulnerability using environment variables in Bitbucket Server and Data Center. An attacker with permission to control their…

  Atlassian · Bitbucket Data Center

  Critical9.8
• CVE-2022-36804

  Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 before version 7.17.10, from version…

  Atlassian · Bitbucket Server

  ExploitedHigh8.8
• CVE-2022-26137

  A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked when the application…

  Atlassian · Bamboo Server

  High8.8
• CVE-2022-26136

  A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps. The…

  Atlassian · Bamboo Server

  Critical9.8
• CVE-2020-36233

  The Microsoft Windows Installer for Atlassian Bitbucket Server and Data Center before version 6.10.9, 7.x before 7.6.4, and from version 7.7.0 before 7.10.1…

  Atlassian · Bitbucket Server

  High7.8
• CVE-2020-14170

  Webhooks in Atlassian Bitbucket Server from version 5.4.0 before version 7.3.1 allow remote attackers to access the content of internal network resources via a…

  Atlassian · Bitbucket Server

  Medium4.3
• CVE-2020-14171

  Atlassian Bitbucket Server from version 4.9.0 before version 7.2.4 allows remote attackers to intercept unencrypted repository import requests via a…

  Atlassian · Bitbucket Server

  Medium6.5
• CVE-2019-20097

  Bitbucket Server and Bitbucket Data Center versions starting from 1.0.0 before 5.16.11, from version 6.0.0 before 6.0.11, from version 6.1.0 before 6.1.9, from…

  Atlassian · Bitbucket Server

  High8.8
• CVE-2019-15012

  Bitbucket Server and Bitbucket Data Center from version 4.13. before 5.16.11, from version 6.0.0 before 6.0.11, from version 6.1.0 before 6.1.9, from version…

  Atlassian · Bitbucket Server

  High8.8