Skip to main content

Bitbucket Data Center

3 CVEs product

Monthly

CVE-2024-21684 MEDIUM This Month

There is a low severity open redirect vulnerability within affected versions of Bitbucket Data Center. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Open Redirect Atlassian Bitbucket Data Center
NVD
CVSS 3.1
4.3
EPSS
0.2%
CVE-2023-22513 HIGH This Week

This High severity RCE (Remote Code Execution) vulnerability was introduced in version 8.0.0 of Bitbucket Data Center and Server. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Code Injection Atlassian Bitbucket Data Center Bitbucket Server
NVD
CVSS 3.1
8.8
EPSS
14.3%
CVE-2022-26133 CRITICAL POC PATCH THREAT Act Now

SharedSecretClusterAuthenticator in Atlassian Bitbucket Data Center versions 5.14.0 and later before 7.6.14, 7.7.0 and later prior to 7.17.6, 7.18.0 and later prior to 7.18.4, 7.19.0 and later prior. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Deserialization Java RCE Atlassian Bitbucket Data Center
NVD GitHub
CVSS 3.1
9.8
EPSS
71.1%
EPSS 0% CVSS 4.3
MEDIUM This Month

There is a low severity open redirect vulnerability within affected versions of Bitbucket Data Center. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Open Redirect Atlassian Bitbucket Data Center
NVD
EPSS 14% CVSS 8.8
HIGH This Week

This High severity RCE (Remote Code Execution) vulnerability was introduced in version 8.0.0 of Bitbucket Data Center and Server. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Code Injection Atlassian +2
NVD
EPSS 71% CVSS 9.8
CRITICAL POC PATCH THREAT Act Now

SharedSecretClusterAuthenticator in Atlassian Bitbucket Data Center versions 5.14.0 and later before 7.6.14, 7.7.0 and later prior to 7.17.6, 7.18.0 and later prior to 7.18.4, 7.19.0 and later prior. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Deserialization Java RCE +2
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy