Product · Jenkins Project

Jenkins Bitbucket Server Integration Plugin

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Medium 4.2

CVE-2026-92138

The OAuth authorization endpoint in Jenkins Bitbucket Server Integration Plugin 6.0.1 and earlier reads the `oauth_call…

Jenkins Project Jenkins Bitbucket Server Integration Plugin Web / CMS

Sep 16, 2026
Medium 5.4

CVE-2022-28134

Missing permission checks in Jekins Bitbucket Server Integration Plugin

Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to create, view, and delete BitBucket Server consumers.

Jenkins Project Jenkins Bitbucket Server Integration Plugin io.jenkins.plugins:atlassian-bitbucket-server-integration Web / CMS Maven

Mar 29, 2022
Medium 5.4

CVE-2022-28133

Stored XSS vulnerability in Jenkins Bitbucket Server Integration Plugin

Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not limit URL schemes for callback URLs on OAuth consumers, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to create BitBucket Server consumers.

Jenkins Project Jenkins Bitbucket Server Integration Plugin io.jenkins.plugins:atlassian-bitbucket-server-integration Web / CMS Maven

Mar 29, 2022