79 exploited vulnerabilities in Bitbucket
- Vendors
- Alt Linux, Almalinux, Apache, Atlassian, Centos, Debian
- With known exploits
- 79
- Affected Apache Tomcat versions
- < 9.0.104, 10.1.40, 11.0.6, 11.0.0, 9.0.90, 10.1.25, 10.1.0, 9.0.108, 10.1.44, 11.0.10, 9.0.0, 9.0.106, 10.1.42, 11.0.8
- Affected Fedorindutny Ip versions
- < 1.1.9, 2.0.0
- Affected Snakeyaml Project Snakeyaml versions
- < 2.0
- Affected Atlassian Bitbucket versions
- < 7.6.19, 7.17.12, 7.21.6, 8.0.5, 8.1.5, 8.2.4, 8.3.3, 8.4.2, 7.6.17, 7.17.10, 7.21.4, 8.0.3, 8.1.3, 8.2.2, 8.3.0
- Affected Atlassian Bitbucket Data Center versions
- < 7.6.14, 7.17.6, 7.18.4, 7.19.4, 7.20.0
- Affected Postgresql Postgresql Jdbc Driver versions
- < 42.2.25, 42.3.2, 42.7.7, 42.2.26, 42.3.7, 42.4.0, 42.4.1
- Affected Vmware Spring Framework versions
- < 6.0.0, 5.3.33, 6.0.18, 6.1.5
- Affected Apache Avro versions
- < 1.11.4
Vulnerabilities with exploits
Highest CVSS first β 15 of these already have exploit code on Sploitus
CVE-2025-31650 5 exploits
CVE-2024-29415
CVE-2023-42282
CVE-2022-1471 9 exploits
CVE-2022-43781 3 exploits
CVE-2022-36804 24 exploits
CVE-2022-26133 4 exploits
CVE-2022-21724
CVE-2016-1000027 3 exploits
CVE-2024-47561
CVE-2020-28471
CVE-2024-22259 1 exploit
CVE-2023-45133
CVE-2022-46175
CVE-2024-21147
CVE-2024-4024
CVE-2023-25194 8 exploits
CVE-2025-52999
CVE-2024-45590 1 exploit
CVE-2024-7254 1 exploit
CVE-2024-34750
CVE-2023-52428
CVE-2024-21538
CVE-2024-38286
CVE-2025-49146
CVE-2025-55163
CVE-2022-42004
CVE-2024-25710
CVE-2022-31197
CVE-2025-61916
CVE-2025-48989
CVE-2025-49125
CVE-2025-48988 1 exploit
CVE-2025-24970
CVE-2024-57699
CVE-2024-30172 1 exploit
CVE-2024-4068
CVE-2024-47072
CVE-2024-38819 6 exploits
CVE-2024-38816 1 exploit
CVE-2024-32007
CVE-2024-24549 1 exploit
CVE-2023-46589
CVE-2023-43642
CVE-2023-34453
CVE-2023-34455
CVE-2023-34454
CVE-2023-3635
CVE-2022-25883
CVE-2022-31129