Jenkins Bitbucket Server Integration — known CVE vulnerabilities

Every CVE whose affected-product data names Jenkins Bitbucket Server Integration, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2025-24398 — CVSS 8.8 (high): Jenkins Bitbucket Server Integration Plugin 2.1.0 through 4.1.3 (both inclusive) allows attackers to craft URLs that would bypass the CSRF…
• CVE-2022-28133 — CVSS 5.4 (medium): Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not limit URL schemes for callback URLs on OAuth consumers, resulting in…
• CVE-2022-28134 — CVSS 5.4 (medium): Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not perform permission checks in several HTTP endpoints, allowing…