Known vulnerabilities in Bitbucket Data Center - page 7
Vendor:
Atlassian
Software:
Bitbucket Data Center
Software CPE:
cpe:2.3:a:atlassian:bitbucket_data_center:*:*:*:*:*:*:*:*
Website:
https://www.atlassian.com
Total vulnerabilities:
147
Public exploits:
18
Known exploited (KEV):
2
Breakdown by Severity Chart
10.2.7
10.5.0
10.5.1
10.2.8
9.4.26
9.4.25
10.4.0
9.4.24
10.4.1
10.1.4
10.4.2
10.2.6
9.4.23
10.3.2
10.2.5
10.1.3
9.4.22
10.2.3
10.2.4
10.3.0
10.2.1
10.3.1
9.4.21
10.2.2
9.4.20
9.4.19
10.1.5
10.2.0
8.19.29
9.4.18
9.4.17
8.19.28
8.14.0-eap01
8.16.2
5.4.1
2.12.7
10.1.1
3.5.0
3.3.1
8.19.27
9.4.16
9.4.15
8.19.26
9.4.14
10.0.2
10.0.1
10.0.0
9.4.13
8.19.25
9.4.12
8.19.24
8.19.23
8.19.22
9.4.11
9.4.10
8.19.21
9.6.5
9.4.9
9.4.8
9.6.4
8.19.20
9.6.3
9.6.2
9.6.1
8.19.19
9.4.7
9.4.6
8.19.18
8.19.17
8.9.27
9.4.5
9.6.0
8.9.26
9.5.2
9.4.4
8.19.16
9.4.3
8.19.15
9.5.1
8.9.25
9.5.0
8.19.14
9.4.2
8.9.24
9.4.1
9.4.0
9.3.2
9.3.1
9.3.0
8.9.23
8.19.13
8.19.12
8.9.22
8.19.11
8.9.21
9.2.1
9.2.0
9.1.1
9.1.0
9.0.1
9.0.0
8.9.20
8.19.10
8.19.9
8.9.19
8.19.8
8.9.18
8.19.7
8.9.17
8.19.6
8.9.16
8.19.5
8.9.15
8.19.4
8.19.3
8.19.2
8.19.1
8.9.14
8.9.13
8.9.12
8.15.5
8.17.2
8.19.0
8.17.1
8.17.0
8.16.3
8.15.4
8.18.1
8.18.0
8.9.11
7.21.23
8.14.6
8.14.5
8.13.6
7.21.22
8.9.10
8.14.4
8.15.3
8.12.6
8.13.5
8.9.9
7.21.21
7.21.20
8.16.1
8.15.2
8.15.1
8.14.3
8.14.2
8.14.1
8.13.4
8.13.3
8.13.2
8.12.5
8.12.4
8.12.3
8.11.6
8.11.5
8.10.6
8.9.8
8.9.7
8.9.6
7.21.19
8.16.0
8.15.0
7.21.18
7.21.17
7.17.21
8.14.0
8.13.1
8.13.0
8.12.2
8.12.1
8.12.0
8.11.4
8.11.3
8.11.2
8.11.1
8.11.0
8.10.5
8.10.4
8.10.3
8.10.2
8.10.1
8.10.0
8.9.5
8.9.4
8.9.3
8.9.2
8.9.1
8.9.0
8.8.7
8.8.6
8.8.5
8.8.4
8.8.3
8.8.2
8.8.1
8.8.0
8.7.5
8.7.4
8.7.3
8.7.2
8.7.1
8.7.0
7.17.20
7.21.16
7.17.19
7.21.15
7.21.14
7.21.13
7.17.18
7.21.12
7.17.17
8.6.4
7.21.11
7.17.16
8.5.4
7.6.23
7.6.22
7.21.10
7.17.15
8.6.3
8.5.3
8.4.4
7.21.9
8.6.2
8.5.2
8.4.3
8.3.4
7.6.21
7.21.8
7.17.14
8.6.1
8.6.0
8.5.1
8.5.0
8.4.2
8.4.1
8.4.0
7.21.7
7.17.13
7.6.20
8.3.3
8.2.4
8.1.5
8.0.5
7.21.6
7.17.12
7.6.19
8.3.2
8.2.3
8.1.4
8.0.4
7.21.5
7.17.11
8.3.1
8.3.0
8.2.2
8.2.1
8.1.3
8.1.2
8.0.3
8.0.2
7.21.4
7.21.3
7.21.2
7.21.1
7.20.3
7.17.10
7.17.9
7.16.3
7.16.2
7.16.1
7.16.0
7.15.3
7.15.2
7.15.1
7.15.0
7.14.2
7.14.1
7.14.0
7.13.1
7.13.0
7.12.0
7.12.1
7.11.2
7.11.1
7.10.1
7.10.0
7.9.1
7.9.0
7.8.1
7.8.0
7.7.1
7.7.0
7.6.17
7.5.2
7.5.1
7.5.0
7.4.2
7.4.1
7.4.0
7.3.2
7.3.1
7.3.0
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.1.4
7.1.3
7.1.2
7.1.1
7.1.0
7.0.5
7.0.4
7.0.3
7.0.2
7.0.1
7.18.3
7.18.2
7.18.1
7.18.0
7.21.0
7.18.4
8.2.0
8.1.1
8.1.0
8.0.1
8.0.0
7.20.2
7.20.1
7.20.0
7.19.5
7.19.4
7.19.3
7.19.2
7.19.1
7.19.0
7.17.8
7.17.7
7.17.6
7.17.5
7.17.4
7.17.3
7.17.2
7.17.1
7.17.0
7.6.16
7.6.15
7.6.14
7.6.13
7.6.12
7.6.11
7.6.10
7.6.9
7.6.8
7.6.7
7.6.6
7.6.5
7.6.4
7.6.3
7.6.2
7.6.1
7.6.0
Vulnerabilities (147)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU93732 - Resource Management Errors CVE-2024-34750 |
CWE-399 | Medium | 8.9.18, 8.19.7 | 03.07.2024 |
SB2024070346 SB20240711245 SB2024071542 and 56 more |
||
| #VU89801 - Server-Side Request Forgery (SSRF) CVE-2024-22262 |
CWE-918 | Medium | 8.9.14, 8.19.3 | 24.05.2024 |
SB2024052420 SB2024052423 SB2024052708 and 76 more |
||
| #VU87614 - Server-Side Request Forgery (SSRF) CVE-2024-22259 |
CWE-918 | Medium | 8.9.14, 8.19.3 | 19.03.2024 |
SB2024031918 SB2024040207 SB2024041660 and 39 more |
||
| #VU87607 - Improper Access Control CVE-2024-22257 |
CWE-284 | Medium | 8.9.12, 8.19.1 | 19.03.2024 |
SB2024031915 SB2024041659 SB2024041660 and 26 more |
||
| #VU86992 - Allocation of Resources Without Limits or Throttling CVE-2024-21634 |
CWE-770 | Medium | 7.21.22, 8.9.10, 8.13.6, 8.14.6, 8.15.5, 8.16.3, 8.17.2, 8.18.1 | 04.03.2024 |
SB2024030419 SB2024031125 SB2024032143 and 18 more |
||
| #VU86695 - Server-Side Request Forgery (SSRF) CVE-2024-22243 |
CWE-918 | Medium | 8.9.14, 8.19.3 | 21.02.2024 |
SB2024022140 SB2024030406 SB2024030529 and 45 more |
||
| #VU85848 - Resource exhaustion CVE-2023-6481 |
CWE-400 | Medium | 7.21.19, 8.9.9, 8.13.5, 8.14.4, 8.15.3, 8.16.2, 8.17.0 | 29.01.2024 |
SB2024012902 SB2024020727 SB2024020840 and 23 more |
||
| #VU85618 - Deserialization of Untrusted Data CVE-2023-6378 |
CWE-502 | Medium | 7.21.19, 8.9.9, 8.13.5, 8.14.4, 8.15.3, 8.16.2, 8.17.0 | 19.01.2024 |
SB2024011926 SB2024011927 SB2024012316 and 39 more |
||
| #VU83533 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-46589 |
CWE-444 | Medium | 7.21.21, 8.9.9, 8.13.5, 8.14.4, 8.15.3, 8.16.2, 8.17.0 | 28.11.2023 |
SB2023112846 SB2023121851 SB2023122831 and 78 more |
||
| #VU82454 - Allocation of Resources Without Limits or Throttling CVE-2023-43642 |
CWE-770 | Medium | 7.21.21, 8.9.9, 8.13.5, 8.14.4, 8.15.3, 8.16.2, 8.17.0 | 26.10.2023 |
SB2023102621 SB2023102628 SB2023103020 and 63 more |
||
| #VU82276 - Allocation of Resources Without Limits or Throttling CVE-2023-5072 |
CWE-770 | Medium | 7.21.18, 8.9.7, 8.11.6, 8.12.4, 8.13.3, 8.14.2 | 20.10.2023 |
SB2023102017 SB2023102018 SB2023113056 and 97 more |
||
| #VU81728 - Resource exhaustion CVE-2023-44487 |
CWE-400 | High | 7.21.18, 8.9.7, 8.11.6, 8.12.4, 8.13.3, 8.14.2 | 10.10.2023 |
SB2023101023 SB2023101024 SB2023101037 and 652 more |
||
| #VU81726 - Integer overflow CVE-2023-36478 |
CWE-190 | Medium | 8.9.8, 8.13.4, 8.14.3, 8.15.2, 8.16.1 | 10.10.2023 |
SB2023101018 SB2023102640 SB2023103106 and 53 more |
||
| #VU80783 - Incorrect Conversion between Numeric Types CVE-2023-3635 |
CWE-681 | Medium | 7.21.18, 8.9.7, 8.11.6, 8.12.4, 8.13.3, 8.14.2 | 14.09.2023 |
SB2023091430 SB2023091528 SB2023100937 and 47 more |
||
| #VU77778 - Improper input validation CVE-2022-29546 |
CWE-20 | Low | 7.21.18, 8.9.7, 8.11.6, 8.12.4, 8.13.3, 8.14.2 | 28.06.2023 |
SB2022050443 SB20230719104 SB20231018117 and 10 more |
||
| #VU77777 - Improper input validation CVE-2022-28366 |
CWE-20 | Low | 7.21.18, 8.9.7, 8.11.6, 8.12.4, 8.13.3, 8.14.2 | 28.06.2023 |
SB2022042155 SB2023112475 SB2023121271 and 7 more |
||
| #VU70385 - Deserialization of Untrusted Data CVE-2022-1471 |
CWE-502 | High | 7.21.16, 8.8.7, 8.9.4, 8.10.4, 8.11.3, 8.12.1, 8.13.0, 8.14.0, 8.15.0, 8.16.0 | 15.12.2022 |
SB2022121539 SB2022121540 SB2022121928 and 124 more |
||
| #VU65499 - Improper input validation CVE-2021-31684 |
CWE-20 | Medium | 7.21.18, 8.9.7, 8.11.6, 8.12.4, 8.13.3, 8.14.2 | 20.07.2022 |
SB2022072048 SB2022072056 SB2022112850 and 20 more |
||
| #VU65486 - Improper input validation CVE-2022-24839 |
CWE-20 | Medium | 7.21.18, 8.9.7, 8.11.6, 8.12.4, 8.13.3, 8.14.2 | 20.07.2022 |
SB2022072038 SB2022102803 SB2022102807 and 31 more |
||
| #VU48979 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2020-25649 |
CWE-611 | Medium | 7.21.18, 8.9.7, 8.11.6, 8.12.4, 8.13.3, 8.14.2 | 03.12.2020 |
SB2020121510 SB2021020321 SB2021042112 and 68 more |
Showing elements 121 - 140 out of 147