Known vulnerabilities in Bitbucket Data Center - page 5

Vendor: Atlassian
Software: Bitbucket Data Center
Software CPE: cpe:2.3:a:atlassian:bitbucket_data_center:*:*:*:*:*:*:*:*
Website: https://www.atlassian.com
Total vulnerabilities: 121
Public exploits: 18
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Bitbucket Data Center Bitbucket Data Center is affected by 121 known vulnerabilities: 17 high, 92 medium, 12 low Critical High Medium Low

Vulnerabilities (121)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100095 - Memory corruption
CVE-2024-47072		 CWE-119 Medium
No
No
 8.9.24, 8.19.14, 9.4.2 07.11.2024 SB20241107102
SB20241115126
SB2024112531
and 36 more
#VU98132 - Inefficient Regular Expression Complexity
CVE-2024-45296		 CWE-1333 Low
No
No
 9.4.3, 9.5.1 08.10.2024 SB2024100822
SB2024100823
SB2024100826
and 87 more
#VU98024 - Improper input validation
CVE-2024-47561		 CWE-20 High
No
No
 8.9.21, 8.19.11 03.10.2024 SB2024100351
SB2024100504
SB2024100984
and 36 more
#VU97458 - Improper input validation
CVE-2024-32007		 CWE-20 Medium
No
No
 8.9.19, 8.19.9 18.09.2024 SB2024091810
SB2024091815
SB2024100249
and 10 more
#VU97224 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-38816		 CWE-22 Medium
Available
No
 8.9.21, 8.19.11 12.09.2024 SB2024091290
SB20241014121
SB20241015124
and 24 more
#VU94555 - Improper input validation
CVE-2024-21147		 CWE-20 Medium
No
No
 8.9.20, 8.19.10, 9.2.1 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 123 more
#VU93732 - Resource Management Errors
CVE-2024-34750		 CWE-399 Medium
No
No
 8.9.18, 8.19.7 03.07.2024 SB2024070346
SB20240711245
SB2024071542
and 56 more
#VU92406 - Incorrect Regular Expression
CVE-2024-4067		 CWE-185 Medium
No
No
 8.9.22, 8.19.12, 9.3.2 20.06.2024 SB20240620121
SB2024062832
SB2024070501
and 41 more
#VU89801 - Server-Side Request Forgery (SSRF)
CVE-2024-22262		 CWE-918 Medium
No
No
 8.9.14, 8.19.3 24.05.2024 SB2024052420
SB2024052423
SB2024052708
and 76 more
#VU89537 - Type confusion
CVE-2024-4367		 CWE-843 High
Available
No
 9.4.3, 9.5.1 15.05.2024 SB2024051527
SB2024051528
SB2024051530
and 59 more
#VU89220 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-30172		 CWE-835 Medium
No
No
 8.9.14, 8.19.3 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 62 more
#VU89218 - Resource exhaustion
CVE-2024-29857		 CWE-400 Medium
No
No
 8.9.24, 8.19.14 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 69 more
#VU87614 - Server-Side Request Forgery (SSRF)
CVE-2024-22259		 CWE-918 Medium
No
No
 8.9.14, 8.19.3 19.03.2024 SB2024031918
SB2024040207
SB2024041660
and 39 more
#VU87607 - Improper Access Control
CVE-2024-22257		 CWE-284 Medium
No
No
 8.9.12, 8.19.1 19.03.2024 SB2024031915
SB2024041659
SB2024041660
and 26 more
#VU87510 - Improper input validation
CVE-2024-24549		 CWE-20 Medium
Available
No
 8.9.12, 8.19.1, 9.0.0 13.03.2024 SB2024031386
SB2024031879
SB2024031880
and 64 more
#VU86859 - Improper Access Control
CVE-2023-45859		 CWE-284 Medium
No
No
 8.9.14 27.02.2024 SB2024022773
SB2024052426
SB2024121109
#VU86695 - Server-Side Request Forgery (SSRF)
CVE-2024-22243		 CWE-918 Medium
Available
No
 8.9.14, 8.19.3 21.02.2024 SB2024022140
SB2024030406
SB2024030529
and 45 more
#VU81726 - Integer overflow
CVE-2023-36478		 CWE-190 Medium
No
No
 8.9.8, 8.13.4, 8.14.3, 8.15.2, 8.16.1 10.10.2023 SB2023101018
SB2023102640
SB2023103106
and 53 more
#VU66747 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-31197		 CWE-89 High
No
No
 8.9.25, 8.19.15, 9.4.3, 9.5.1 24.08.2022 SB2022082432
SB2022082543
SB2022090901
and 27 more
#VU62714 - Improper Initialization
CVE-2022-21724		 CWE-665 Medium
No
No
 8.9.25, 8.19.15, 9.4.3, 9.5.1 02.05.2022 SB2022050205
SB2022062202
SB2022062204
and 18 more


Showing elements 81 - 100 out of 121