Bitbucket Server (Atlassian) - vulnerabilities (CVEs)

18 CVEs, 1 in the last 30 days, 508 known versions, newest CVE from 2026-10-05. Vendor: Atlassian.

CVEs of Bitbucket Server

CVE-2026-21589 - CVSS 9.3 (critical), 2026-10-05: This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center.…
CVE-2023-22513 - CVSS 8.8 (high), 2023-09-19: This High severity RCE (Remote Code Execution) vulnerability was introduced in version 8.0.0 of Bitbucket Data Center and Server. This RCE (Remote Code…
CVE-2022-43781 - CVSS 9.8 (critical), 2022-11-17: There is a command injection vulnerability using environment variables in Bitbucket Server and Data Center. An attacker with permission to control their…
CVE-2022-36804 - CVSS 8.8 (high), 2022-08-25: Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 before version 7.17.10, from version…
CVE-2022-26137 - CVSS 8.8 (high), 2022-07-20: A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked when the…
CVE-2022-26136 - CVSS 9.8 (critical), 2022-07-20: A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps. The…
CVE-2020-36233 - CVSS 7.8 (high), 2021-02-18: The Microsoft Windows Installer for Atlassian Bitbucket Server and Data Center before version 6.10.9, 7.x before 7.6.4, and from version 7.7.0 before 7.10.1…
CVE-2020-14171 - CVSS 6.5 (medium), 2020-07-09: Atlassian Bitbucket Server from version 4.9.0 before version 7.2.4 allows remote attackers to intercept unencrypted repository import requests via a…
CVE-2020-14170 - CVSS 4.3 (medium), 2020-07-09: Webhooks in Atlassian Bitbucket Server from version 5.4.0 before version 7.3.1 allow remote attackers to access the content of internal network resources via…
CVE-2019-15012 - CVSS 8.8 (high), 2020-01-15: Bitbucket Server and Bitbucket Data Center from version 4.13. before 5.16.11, from version 6.0.0 before 6.0.11, from version 6.1.0 before 6.1.9, from version…
CVE-2019-15010 - CVSS 8.8 (high), 2020-01-15: Bitbucket Server and Bitbucket Data Center versions starting from version 3.0.0 before version 5.16.11, from version 6.0.0 before 6.0.11, from version 6.1.0…
CVE-2019-20097 - CVSS 8.8 (high), 2020-01-15: Bitbucket Server and Bitbucket Data Center versions starting from 1.0.0 before 5.16.11, from version 6.0.0 before 6.0.11, from version 6.1.0 before 6.1.9,…
CVE-2019-15005 - CVSS 4.3 (medium), 2019-11-08: The Atlassian Troubleshooting and Support Tools plugin prior to version 1.17.2 allows an unprivileged user to initiate periodic log scans and send the results…
CVE-2019-15000 - CVSS 9.8 (critical), 2019-09-19: The commit diff rest endpoint in Bitbucket Server and Data Center before 5.16.10 (the fixed version for 5.16.x ), from 6.0.0 before 6.0.10 (the fixed version…
CVE-2018-5225 - CVSS 9.9 (critical), 2018-03-22: In browser editing in Atlassian Bitbucket Server from version 4.13.0 before 5.4.8 (the fixed version for 4.13.0 through 5.4.7), 5.5.0 before 5.5.8 (the fixed…
CVE-2017-18087 - CVSS 7.5 (high), 2018-02-15: The download commit resource in Atlassian Bitbucket Server from version 5.1.0 before version 5.1.7, from version 5.2.0 before version 5.2.5, from version…
CVE-2017-18038 - CVSS 5.3 (medium), 2018-02-02: The repository settings resource in Atlassian Bitbucket Server before version 5.6.0 allows remote attackers to read the first line of arbitrary files via a…
CVE-2017-18037 - CVSS 6.5 (medium), 2018-02-02: The git repository tag rest resource in Atlassian Bitbucket Server from version 3.7.0 before 4.14.11 (the fixed version for 4.14.x), from version 5.0.0 before…
CVE-2017-18036 - CVSS 4.3 (medium), 2018-02-02: The Github repository importer in Atlassian Bitbucket Server before version 5.3.0 allows remote attackers to determine if a service they could not otherwise…