Atlassian Bitbucket

Name: Atlassian Bitbucket
Brand: Atlassian

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

46critical164high144medium7low

updated 2026-10-26

vulnerabilities (535)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-22518US	critical9.8OT critical	100.0% (100th)	KEV	no fix	2023-10-31	3 versions
CVE-2023-22527US	critical9.8OT critical	100.0% (100th)	KEV	no fix	2024-01-16	3 versions
CVE-2023-46604US	critical9.8OT critical	99.9% (100th)	KEV	no fix	2023-10-27	3 versions
CVE-2022-22965US	critical9.8OT critical	99.6% (100th)	KEV	no fix	2022-04-01	3 versions
CVE-2026-21589US	high7.5OT critical	99.5% (100th)	KEV	9.4.26	2026-10-05	4 versions
CVE-2024-1086US	high7.8OT critical	28.1% (98th)	KEV	10.0.2	2024-01-31	3 versions
CVE-2023-50387US	high7.5	100.0% (100th)	Exploit	10.0.2	2024-02-14	3 versions
CVE-2023-25136US	medium6.5	89.8% (100th)	Exploit	9.4.13 (LTS)	2023-02-03	3 versions
CVE-2025-66516US	critical9.8	89.0% (100th)	Exploit	no fix	2025-12-04	≤ vers:unknown/*
CVE-2021-29505US	high8.8	77.2% (100th)	Exploit	9.4.13 (LTS)	2021-05-28	3 versions
CVE-2022-23221US	critical9.8	64.8% (99th)	Exploit	8.19.25 (LTS)	2022-01-19	3 versions
CVE-2025-55752US	—	64.4% (99th)	Exploit	no fix	2025-10-27	≤ vers:unknown/*
CVE-2025-54988US	—	47.9% (99th)	Exploit	no fix	2025-08-20	≤ vers:unknown/*
CVE-2022-41903US	critical9.8	44.3% (99th)	Exploit	no fix	2023-01-17	3 versions
CVE-2025-48976US	—	32.9% (98th)	Exploit	no fix	2025-06-16	≤ vers:unknown/*
CVE-2025-48988US	—	30.4% (98th)	Exploit	9.4.9 LTS	2025-06-16	3 versions
CVE-2023-22524US	critical9.8	24.7% (98th)	Exploit	no fix	2023-12-06	3 versions
CVE-2022-25845US	critical9.8	18.7% (97th)	Exploit	9.4.13 (LTS)	2022-06-10	3 versions
CVE-2019-13990US	critical9.8	16.6% (97th)	Exploit	no fix	2019-07-26	3 versions
CVE-2022-24785US	high7.5	13.8% (96th)	Exploit	9.4.13 (LTS)	2022-04-04	3 versions
CVE-2022-22978US	critical9.8OT high	12.4% (96th)	Exploit	no fix	2022-05-19	3 versions
CVE-2022-46175US	high8.8	9.70% (95th)	Exploit	no fix	2022-12-24	5 versions
CVE-2024-21534US	—	9.02% (95th)	Exploit	10.0.2	2024-10-11	3 versions
CVE-2021-26291US	critical9.1	8.69% (95th)	Exploit	8.19.25 (LTS)	2021-04-23	3 versions
CVE-2024-29415US	—	8.28% (95th)	Exploit	8.19.25 (LTS)	2024-05-27	3 versions
CVE-2021-2471US	high7.9OT high	7.49% (94th)	Exploit	8.19.25 (LTS)	2021-10-20	3 versions
CVE-2021-22119US	high7.5OT elevated	6.00% (93rd)	Exploit	8.19.25 (LTS)	2021-06-29	3 versions
CVE-2022-22968US	medium5.3	5.67% (93rd)	Exploit	8.19.25 (LTS)	2022-04-14	3 versions
CVE-2020-36518US	high7.5	4.86% (92nd)	Exploit	10.0.2	2022-03-11	3 versions
CVE-2021-44906US	critical9.8	4.58% (92nd)	Exploit	no fix	2022-03-17	4 versions
CVE-2021-23358US	high7.2	4.20% (91st)	Exploit	no fix	2021-03-29	2 versions
CVE-2022-3358US	high7.5	4.01% (90th)	Exploit	8.19.25 (LTS)	2022-10-11	3 versions
CVE-2025-8671US	—	3.62% (89th)	Exploit	8.19.25 (LTS)	2025-08-13	3 versions
CVE-2025-49125US	—OT elevated	3.44% (89th)	Exploit	9.6.5	2025-06-16	3 versions
CVE-2022-31692US	critical9.8OT high	3.39% (89th)	Exploit	no fix	2022-10-31	3 versions
CVE-2022-22971US	medium6.5	3.17% (88th)	Exploit	8.19.25 (LTS)	2022-05-12	3 versions
CVE-2025-46701US	—	3.14% (88th)	Exploit	9.4.8 (LTS)	2025-05-29	3 versions
CVE-2026-4800US	critical9.8	2.76% (86th)	Exploit	no fix	2026-03-31	≤ vers:unknown/*
CVE-2022-22932US	medium5.3	2.75% (86th)	Exploit	9.4.13 (LTS)	2022-01-26	3 versions
CVE-2022-22976US	medium5.3	2.34% (84th)	Exploit	8.19.25 (LTS)	2022-05-19	3 versions
CVE-2022-22970US	medium5.3	1.96% (80th)	Exploit	10.0.2	2022-05-12	3 versions
CVE-2026-40175US	medium4.8	1.95% (80th)	Exploit	no fix	2026-04-10	2 versions
CVE-2022-25927US	high7.5	1.73% (77th)	Exploit	9.4.19	2023-01-26	2 versions
CVE-2021-22569US	medium5.5	1.67% (77th)	Exploit	no fix	2022-01-10	2 versions
CVE-2026-27606US	critical9.8	1.65% (76th)	Exploit	no fix	2026-02-25	4 versions
CVE-2026-2332US	critical9.1	1.31% (70th)	Exploit	no fix	2026-04-14	4 versions
CVE-2023-3635US	high7.5	1.25% (69th)	Exploit	9.4.19	2023-07-12	2 versions
CVE-2024-47875US	medium6.1	1.13% (66th)	Exploit	9.4.19	2024-10-11	2 versions
CVE-2025-55163US	high7.5	1.10% (65th)	Exploit	8.19.25 (LTS)	2025-08-13	4 versions
CVE-2026-0603US	—	1.03% (64th)	Exploit	no fix	2026-01-23	4 versions

showing 50 of 535

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-400Uncontrolled Resource Consumption78 CVEs
CWE-20Improper Input Validation49 CVEs
CWE-770Allocation of Resources Without Limits or Throttling49 CVEs
CWE-1333Inefficient Regular Expression Complexity28 CVEs
CWE-1321Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')22 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor22 CVEs
CWE-125Out-of-bounds Read20 CVEs
CWE-787Out-of-bounds Write17 CVEs

sources (2)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)511 CVEs
NLNCSC-NL (CSAF)107 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan