Known vulnerabilities in Bitbucket Data Center - page 2

Vendor: Atlassian
Software: Bitbucket Data Center
Software CPE: cpe:2.3:a:atlassian:bitbucket_data_center:*:*:*:*:*:*:*:*
Website: https://www.atlassian.com
Total vulnerabilities: 121
Public exploits: 18
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Bitbucket Data Center Bitbucket Data Center is affected by 121 known vulnerabilities: 17 high, 92 medium, 12 low Critical High Medium Low

Vulnerabilities (121)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139386 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2020-28282		 CWE-1321 Medium
No
No
 10.3.2 26.07.2026 SB2020122927
SB2026072615
SB2022030758
and 1 more
#VU132259 - Covert Timing Channel
CVE-2026-5598		 CWE-385 Medium
No
No
 9.4.22 25.05.2026 SB2026052530
SB2026052544
SB2026052931
and 16 more
#VU132004 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-35554		 CWE-362 High
No
No
 9.4.22 21.05.2026 SB2026052106
SB2026052107
SB2026052541
and 8 more
#VU131183 - Resource exhaustion
CVE-2026-41284		 CWE-400 Medium
No
No
 9.4.21, 10.2.4, 10.3.1 12.05.2026 SB2026051281
SB2026051592
SB2026052607
and 21 more
#VU131107 - Resource exhaustion
CVE-2026-45149		 CWE-400 Medium
No
No
 10.2.4, 10.3.1 12.05.2026 SB2026051222
SB2026061993
SB2026061994
and 2 more
#VU128397 - Improper input validation
CVE-2026-33750		 CWE-20 Medium
No
No
 9.4.19, 10.2.2 28.04.2026 SB20260428215
SB20260428223
SB2026042934
and 8 more
#VU127606 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-42035		 CWE-113 Medium
No
No
 9.4.21, 10.2.4, 10.3.1 24.04.2026 SB20260424169
SB2026061912
SB2026061913
and 15 more
#VU127603 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-42033		 CWE-1321 Medium
No
No
 9.4.21, 10.2.4, 10.3.1 24.04.2026 SB20260424169
SB2026061954
SB2026061992
and 11 more
#VU127599 - Improper Access Control
CVE-2026-42038		 CWE-284 Medium
No
No
 9.4.19, 10.2.2, 10.3.1 24.04.2026 SB20260424169
SB2026061992
SB2026061993
and 9 more
#VU124422 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-33870		 CWE-444 Medium
Available
No
 9.4.22, 10.2.4, 10.3.1 25.03.2026 SB2026032533
SB20260415180
SB2026042043
and 20 more
#VU122999 - Improper Authorization
CVE-2026-24734		 CWE-285 Medium
No
No
 9.4.21, 10.2.4, 10.3.1 17.02.2026 SB2026021766
SB2026030536
SB2026031245
and 24 more
#VU118143 - Incorrect Regular Expression
CVE-2016-10540		 CWE-185 High
No
No
 10.3.2 06.11.2025 SB2018053124
SB2025110755
SB2026010817
and 1 more
#VU117681 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-55752		 CWE-22 High
Available
No
 8.19.26, 9.4.15, 10.1.1 27.10.2025 SB2025102748
SB20251031122
SB20251031123
and 43 more
#VU114024 - Resource exhaustion
CVE-2025-48989		 CWE-400 Medium
No
No
 8.19.26, 9.4.15, 10.1.1 13.08.2025 SB2025081375
SB2025081376
SB20250820127
and 49 more
#VU112106 - Memory corruption
CVE-2025-52999		 CWE-119 Medium
No
No
 8.19.26, 9.4.15 02.07.2025 SB2025070257
SB2025070261
SB2025070262
and 43 more
#VU97758 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-45801		 CWE-1321 Medium
No
No
 9.4.18, 10.2.2 27.09.2024 SB2024092751
SB2024100823
SB2024100827
and 32 more
#VU97652 - Resource exhaustion
CVE-2024-38286		 CWE-400 Medium
No
No
 8.19.26 23.09.2024 SB2024092355
SB2024100267
SB2024102808
and 26 more
#VU78932 - Incorrect Regular Expression
CVE-2022-25883		 CWE-185 Medium
No
No
 9.4.17, 10.1.5, 10.2.0 03.08.2023 SB2023080361
SB2023080362
SB2023081514
and 73 more
#VU73969 - Incorrect Regular Expression
CVE-2022-25927		 CWE-185 Medium
No
No
 9.4.18, 10.2.0 23.03.2023 SB2023032313
SB2023032315
SB2023032710
and 19 more
#VU46068 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-7729		 CWE-94 Medium
No
No
 10.3.2 26.08.2020 SB2020082603
SB2023020757
SB2022030731
and 3 more


Showing elements 21 - 40 out of 121