Known vulnerabilities in Bitbucket Data Center - page 8

Vendor: Atlassian

Software: Bitbucket Data Center

Software CPE: cpe:2.3:a:atlassian:bitbucket_data_center:*:*:*:*:*:*:*:*

Website: https://www.atlassian.com

Total vulnerabilities: 147

Public exploits: 18

Known exploited (KEV): 2

Vulnerabilities (147)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU81100 - Improper input validation CVE-2023-22513	CWE-20	Medium	No	No	8.9.5, 8.10.5, 8.11.4, 8.12.2, 8.13.1	25.09.2023	SB2023092532
#VU69408 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-43781	CWE-78	High	Available	No	7.6.19, 7.17.12, 7.21.6, 8.0.5, 8.1.5, 8.2.4, 8.3.3, 8.4.2	18.11.2022	SB2022111807
#VU66798 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-36804	CWE-78	High	Available	Exploited	7.6.17, 7.17.10, 7.21.4, 8.0.3, 8.1.3, 8.2.2, 8.3.1	29.08.2022	SB2022082908
#VU66555 - Deserialization of Untrusted Data CVE-2022-26133	CWE-502	High	Available	No	7.6.14, 7.17.6, 7.18.4, 7.19.4, 7.20.1, 7.21.0	17.08.2022	SB2022072917
#VU65892 - Insufficient Verification of Data Authenticity CVE-2022-26137	CWE-345	Medium	No	No	7.6.16, 7.17.8, 7.19.5, 7.20.2, 8.0.1, 8.1.1, 8.2.0	29.07.2022	SB2022072917
#VU65891 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-26136	CWE-79	Low	No	No	7.6.16, 7.17.8, 7.19.5, 7.20.2, 8.0.1, 8.1.1, 8.2.0	29.07.2022	SB2022072917
#VU58198 - Exposure of sensitive information to an unauthorized actor CVE-2021-40690	CWE-200	Medium	No	No	7.21.18	16.11.2021	SB2021111622 SB2021111712 SB2022012032 and 37 more

Showing elements 141 - 160 out of 147