Atlassian Bitbucket Data Center Vulnerabilities: CVEs, CISA KEV & Security Advisories

This page aggregates every publicly disclosed vulnerability (CVE) affecting Atlassian Bitbucket Data Center, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Affected versions and CVEs

Browse every Atlassian Bitbucket Data Center version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

8.0.02 CVEs
8.1.02 CVEs
>= 8.0.01 CVE
>= 8.1.01 CVE
>= 8.10.01 CVE
>= 8.11.01 CVE
>= 8.12.01 CVE
>= 8.13.01 CVE
>= 8.2.01 CVE
>= 8.3.01 CVE
>= 8.4.01 CVE
>= 8.5.01 CVE
>= 8.6.01 CVE
>= 8.7.01 CVE
>= 8.8.01 CVE
>= 8.9.01 CVE
8.0.3 to 8.0.51 CVE
8.1.3 to 8.1.51 CVE
8.19.11 CVE
8.2.2 to 8.2.41 CVE
8.3.0 to 8.3.41 CVE
8.4.0 to 8.4.41 CVE
8.5.0 to 8.5.41 CVE
8.6.0 to 8.6.41 CVE
8.7.0 to 8.7.51 CVE
8.8.0 to 8.8.71 CVE
8.9.0 to 8.9.121 CVE
before 7.17.121 CVE
before 7.21.61 CVE
before 7.6.191 CVE
before 8.0.51 CVE
before 8.1.51 CVE
before 8.2.41 CVE
before 8.3.31 CVE
before 8.4.21 CVE
before 8.5.01 CVE

Fixed in

unspecified10 CVEs
5.16.113 CVEs
6.0.113 CVEs
6.1.93 CVEs
6.2.73 CVEs
6.3.63 CVEs
6.4.43 CVEs
6.5.33 CVEs
6.6.33 CVEs
6.7.33 CVEs
6.8.23 CVEs
6.9.13 CVEs
7.17.82 CVEs
7.19.52 CVEs

Find a version

13 CVEs

Sort

Low vulnerability · 2024-07-24
CVE-2024-21684
Patch
CWE-601
Low · CVSS 3.1
EPSS 0.7% (72th pct)2024-07-24
High vulnerability · 2023-09-19
CVE-2023-22513
Patch
CWE-94
High · CVSS 8.5
EPSS 11.6% (94th pct)2023-09-19
Critical vulnerability · 2022-11-17
CVE-2022-43781
Public exploit
Patch
CWE-77
Critical · CVSS 9.8
EPSS 87.5% (99th pct)2022-11-17
High vulnerability · 2022-08-25
CVE-2022-36804
CISA KEV
Public exploit
Patch
CWE-78
Added to CISA KEV 2022-09-30
High · CVSS 8.7
EPSS 94.4% (100th pct)2022-08-25
High vulnerability · 2022-07-20
CVE-2022-26137
Patch
CWE-180
High · CVSS 8.8
EPSS 0.1% (31th pct)2022-07-20
Critical vulnerability · 2022-07-20
CVE-2022-26136
Patch
CWE-180
Critical · CVSS 9.8
EPSS 0.3% (55th pct)2022-07-20
Critical vulnerability · 2022-04-20
CVE-2022-26133
Patch
CWE-502
Critical · CVSS 9.8
EPSS 81.4% (99th pct)2022-04-20
Vulnerability · 2021-02-18
CVE-2020-36233
Patch
Unscored
EPSS 0.0% (12th pct)2021-02-18
Vulnerability · 2020-01-15
CVE-2019-20097
Patch
Unscored
EPSS 2.8% (87th pct)2020-01-15
Vulnerability · 2020-01-15
CVE-2019-15012
Patch
Unscored
EPSS 1.8% (83th pct)2020-01-15
Vulnerability · 2020-01-15
CVE-2019-15010
Patch
Unscored
EPSS 2.0% (84th pct)2020-01-15
Vulnerability · 2019-09-19
CVE-2019-15000
Public exploit
Patch
Unscored
EPSS 11.0% (94th pct)2019-09-19
Vulnerability · 2019-06-03
CVE-2019-3397
Patch
Unscored
EPSS 5.1% (90th pct)2019-06-03

Atlassian Bitbucket Data Center Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Specific versions

Fixed in

Common weakness types

Disclosure activity by year

Other Atlassian products

Frequently asked questions

How many CVEs does Atlassian Bitbucket Data Center have?

How many Atlassian Bitbucket Data Center CVEs are in CISA KEV?

Are there public exploits for Atlassian Bitbucket Data Center vulnerabilities?

Which versions of Atlassian Bitbucket Data Center are affected?

What are the most common weakness types in Atlassian Bitbucket Data Center CVEs?

How many critical Atlassian Bitbucket Data Center vulnerabilities are there?

What is the average severity of Atlassian Bitbucket Data Center CVEs?

References

Track Atlassian Bitbucket Data Center vulnerabilities