Known Exploited Vulnerabilities September 30, 2022 · CISA KEV Catalog

CVE-2022-36804: Atlassian Bitbucket Server and Data Center Command Injection Vulnerability

Multiple API endpoints of Atlassian Bitbucket Server and Data Center contain a command injection vulnerability where an attacker with access to a public Bitbucket repository, or with read permissions to a private one, can execute code by sending a malicious HTTP request.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: Atlassian CVE-2022-36804
Related: CVE-2026-21589: Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability Known Exploited Vulnerabilities · Oct 15, 2026
CVE-2021-26086: Atlassian Jira Server and Data Center Path Traversal Vulnerability Known Exploited Vulnerabilities · Nov 12, 2024
CVE-2023-22527: Atlassian Confluence Data Center and Server Template Injection Vulnerability Known Exploited Vulnerabilities · Jan 24, 2024