Atlassian Bitbucket Data Center vulnerabilities

3 CVEs affecting Atlassian Bitbucket Data Center, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-21684, published 2024-07-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-26133, published 2022-04-20. Critical severity, CVSS 9.8. EPSS: 70.4% chance of exploitation in the next 30 days. SharedSecretClusterAuthenticator in Atlassian Bitbucket Data Center versions 5.14.0 and later before 7.6.14, 7.7.0 and later prior to 7.17.6, 7.18.0 and later prior to 7.18.4, 7.19.0 and later prior…
CVE-2023-22513, published 2023-09-19. High severity, CVSS 8.8. EPSS: 15.3% chance of exploitation in the next 30 days. This High severity RCE (Remote Code Execution) vulnerability was introduced in version 8.0.0 of Bitbucket Data Center and Server. This RCE (Remote Code Execution) vulnerability, with a CVSS Score of…
CVE-2024-21684, published 2024-07-24. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. There is a low severity open redirect vulnerability within affected versions of Bitbucket Data Center. Versions of Bitbucket DC from 8.0.0 to 8.9.12 and 8.19.0 to 8.19.1 are affected by this…