CVE-2020-36233

7.8 highEPSS 0.3%

High (7.8) in atlassian bitbucket. EPSS 0.3% chance of exploitation in the next 30 days.

The Microsoft Windows Installer for Atlassian Bitbucket Server and Data Center before version 6.10.9, 7.x before 7.6.4, and from version 7.7.0 before 7.10.1 allows local attackers to escalate privileges because of weak permissions on the installation directory.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 18% of CVEs (scores of 2026-10-31)
CWE: CWE-276
Published: 2021-02-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

atlassian:bitbucket

References

https://jira.atlassian.com/browse/BSERV-12753
https://www.kb.cert.org/vuls/id/240785
https://jira.atlassian.com/browse/BSERV-12753
https://www.kb.cert.org/vuls/id/240785

Check your stack JSON