Known vulnerabilities in Bitbucket OAuth
Vendor:
Jenkins
Software:
Bitbucket OAuth
Software CPE:
cpe:2.3:a:jenkins:bitbucket_oauth:*:*:*:*:*:jenkins:*:*
Website:
https://jenkins.io/
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU132685 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2026-48924 |
CWE-601 | Medium | 0.18 | 28.05.2026 |
SB20260528284 |
||
| #VU71518 - Session Fixation CVE-2023-24428 |
CWE-384 | Medium | 0.13 | 25.01.2023 |
SB2023012520 |
||
| #VU71517 - Session Fixation CVE-2023-24427 |
CWE-384 | High | 0.13 | 25.01.2023 |
SB2023012520 |
||
| #VU22252 - Cleartext Storage of Sensitive Information CVE-2019-10460 |
CWE-312 | Low | 0.10 | 24.10.2019 |
SB2019102403 |