Known vulnerabilities in Bitbucket Data Center - page 3

Vendor: Atlassian
Software: Bitbucket Data Center
Software CPE: cpe:2.3:a:atlassian:bitbucket_data_center:*:*:*:*:*:*:*:*
Website: https://www.atlassian.com
Total vulnerabilities: 147
Public exploits: 18
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Bitbucket Data Center Bitbucket Data Center is affected by 147 known vulnerabilities: 22 high, 112 medium, 13 low Critical High Medium Low

Vulnerabilities (147)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139386 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2020-28282		 CWE-1321 Medium
No
No
 10.3.2 26.07.2026 SB2020122927
SB2026072615
SB2022030758
and 1 more
#VU139083 - Interpretation Conflict
CVE-2026-6322		 CWE-436 Medium
No
No
 9.4.22, 10.2.0, 10.3.0 22.07.2026 SB2026072227
SB2026072231
SB2026072232
and 18 more
#VU132259 - Covert Timing Channel
CVE-2026-5598		 CWE-385 Medium
No
No
 9.4.22 25.05.2026 SB2026052530
SB2026052544
SB2026052931
and 19 more
#VU132004 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-35554		 CWE-362 High
No
No
 9.4.22 21.05.2026 SB2026052106
SB2026052107
SB2026052541
and 8 more
#VU131249 - Use of Uninitialized Resource
CVE-2026-45736		 CWE-908 Low
No
No
 9.4.22, 10.2.5, 10.3.1 12.05.2026 SB20260512113
SB2026061995
SB2026062221
and 13 more
#VU131183 - Resource exhaustion
CVE-2026-41284		 CWE-400 Medium
No
No
 9.4.21, 10.2.4, 10.3.1 12.05.2026 SB2026051281
SB2026051592
SB2026052607
and 23 more
#VU131107 - Resource exhaustion
CVE-2026-45149		 CWE-400 Medium
No
No
 10.2.4, 10.3.1 12.05.2026 SB2026051222
SB2026061993
SB2026061994
and 3 more
#VU130210 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-42585		 CWE-444 Medium
No
No
 9.4.22, 10.2.4, 10.3.1 05.05.2026 SB20260505124
SB2026052040
SB20260528254
and 17 more
#VU128397 - Improper input validation
CVE-2026-33750		 CWE-20 Medium
No
No
 9.4.19, 10.2.2 28.04.2026 SB20260428215
SB20260428223
SB2026042934
and 9 more
#VU127606 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-42035		 CWE-113 Medium
No
No
 9.4.21, 10.2.4, 10.3.1 24.04.2026 SB20260424169
SB2026061912
SB2026061913
and 18 more
#VU127603 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-42033		 CWE-1321 Medium
No
No
 9.4.21, 10.2.4, 10.3.1 24.04.2026 SB20260424169
SB2026061954
SB2026061992
and 14 more
#VU127599 - Improper Access Control
CVE-2026-42038		 CWE-284 Medium
No
No
 9.4.19, 10.2.2, 10.3.1 24.04.2026 SB20260424169
SB2026061992
SB2026061993
and 11 more
#VU124423 - Allocation of Resources Without Limits or Throttling
CVE-2026-33871		 CWE-770 Medium
No
No
 9.4.22, 10.2.4, 10.3.1 25.03.2026 SB2026032533
SB20260415180
SB20260422237
and 17 more
#VU124422 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-33870		 CWE-444 Medium
Available
No
 9.4.22, 10.2.4, 10.3.1 25.03.2026 SB2026032533
SB20260415180
SB2026042043
and 23 more
#VU122999 - Improper Authorization
CVE-2026-24734		 CWE-285 Medium
No
No
 9.4.21, 10.2.4, 10.3.1 17.02.2026 SB2026021766
SB2026030536
SB2026031245
and 27 more
#VU118143 - Incorrect Regular Expression
CVE-2016-10540		 CWE-185 High
No
No
 10.3.2 06.11.2025 SB2018053124
SB2025110755
SB2026010817
and 1 more
#VU97758 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-45801		 CWE-1321 Medium
No
No
 9.4.18, 10.2.2 27.09.2024 SB2024092751
SB2024100823
SB2024100827
and 32 more
#VU72013 - UNIX Symbolic Link (Symlink) Following
CVE-2022-1537		 CWE-61 Low
No
No
 10.3.2 07.02.2023 SB2023020752
SB2023020757
SB2026072615
#VU51945 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-23358		 CWE-94 High
No
No
 10.3.2 06.04.2021 SB2021040623
SB2021040624
SB2021050609
and 20 more
#VU46068 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-7729		 CWE-94 Medium
No
No
 10.3.2 26.08.2020 SB2020082603
SB2023020757
SB2022030731
and 3 more


Showing elements 41 - 60 out of 147