Advisories · Technology

Atlassian Bitbucket Data Center.

Every CVE that names Atlassian Bitbucket Data Center among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-21589 CVE record

CVSS 9.3 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Files accessible to external parties in Atlassian Bamboo Data Center and others
- Atlassian Bamboo Data Center
- Atlassian Bitbucket Data Center
- Information disclosure
Not analysed yet 5 Oct 2026
CVE-2024-21684 CVE record

CVSS 3.1 Low

Open redirect in Atlassian Bitbucket Data Center
- Atlassian Bitbucket Data Center
- Open redirect
Not analysed yet 24 Jul 2024
CVE-2023-22513 CVE record

CVSS 8.5 HighCritical · CVSS 7+ and EPSS

Code injection in Atlassian Bitbucket Data Center and others
- Atlassian Bitbucket Data Center
- Atlassian Bitbucket Server
- Code injection
Not analysed yet 19 Sept 2023
CVE-2022-43781 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Command injection in Atlassian Bitbucket Data Center and others
- Atlassian Bitbucket Data Center
- Atlassian Bitbucket Server
- Command injection
Not analysed yet 17 Nov 2022
CVE-2022-36804 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

OS command injection in Atlassian Bitbucket Server and others
- Atlassian Bitbucket Server
- Atlassian Bitbucket Data Center
- Command injection
Not analysed yet 25 Aug 2022
CVE-2022-26137 CVE record

CVSS 8.8 High

A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked when the application processes requests or responses.
- Atlassian Bamboo Server
- Atlassian Bamboo Data Center
- CWE-180
Not analysed yet 20 Jul 2022
CVE-2022-26136 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps.
- Atlassian Bamboo Server
- Atlassian Bamboo Data Center
- CWE-180
Not analysed yet 20 Jul 2022
CVE-2022-26133 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Deserialization of untrusted data in Atlassian Bitbucket Data Center
- Atlassian Bitbucket Data Center
- Insecure deserialization
Not analysed yet 20 Apr 2022
CVE-2020-36233 CVE record

Atlassian Bitbucket Server: The Microsoft Windows Installer for Atlassian Bitbucket Server and Data Center before…
- Atlassian Bitbucket Server
- Atlassian Bitbucket Data Center
Not analysed yet 18 Feb 2021
CVE-2019-20097 CVE record

Atlassian Bitbucket Server: Bitbucket Server and Bitbucket Data Center versions starting from 1.0.0 before 5.16.11…
- Atlassian Bitbucket Server
- Atlassian Bitbucket Data Center
Not analysed yet 15 Jan 2020
CVE-2019-15012 CVE record

Atlassian Bitbucket Server: Bitbucket Server and Bitbucket Data Center from version 4.13. before 5.16.11…
- Atlassian Bitbucket Server
- Atlassian Bitbucket Data Center
Not analysed yet 15 Jan 2020
CVE-2019-15010 CVE record

Atlassian Bitbucket Server: Bitbucket Server and Bitbucket Data Center versions starting from version 3.0.0 before…
- Atlassian Bitbucket Server
- Atlassian Bitbucket Data Center
Not analysed yet 15 Jan 2020
CVE-2019-15000 CVE record

Atlassian Bitbucket Server: The commit diff rest endpoint in Bitbucket Server and Data Center before 5.16.10 (the…
- Atlassian Bitbucket Server
- Atlassian Bitbucket Data Center
Not analysed yet 19 Sept 2019
CVE-2019-3397 CVE record

Atlassian Bitbucket Data Center: Atlassian Bitbucket Data Center licensed instances starting with version 5.13.0 before…
- Atlassian Bitbucket Data Center
Not analysed yet 3 Jun 2019