Read the docs
TI-2025-16100 Aliases CVE-2025-22157GHSA-352j-376q-2pmc

Improper access control in Atlassian Jira Core Data Center

Priority LOW 35CWE-284Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
Low · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-284.

Summary

This High severity PrivEsc (Privilege Escalation) vulnerability was introduced in versions: 9.12.0, 10.3.0, 10.4.0, and 10.5.0 of Jira Core Data Center and Server 5.12.0, 10.3.0, 10.4.0, and 10.5.0 of Jira Service Management Data Center and Server This PrivEsc (Privilege Escalation) vulnerability, with a CVSS Score of 7.2, allows an attacker to perform actions as a higher-privileged user. Atlassian recommends that Jira Core Data Center and Server and Jira Service Management Data Center and Server customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions: Jira Core Data Center and Server 9.12: Upgrade to a release greater than or equal to 9.12.20 Jira Service Management Data Center and Server 5.12: Upgrade to a release greater than or equal to 5.12.20 Jira Core Data Center 10.3: Upgrade to a release greater than or equal to 10.3.5 Jira Service Management Data Center 10.3: Upgrade to a release greater than or equal to 10.3.5 Jira Core Data Center 10.4: Upgrade to a release greater than or equal to 10.6.0 Jira Service Management Data Center 10.4: Upgrade to a release greater than or equal to 10.6.0 Jira Core Data Center 10.5: Upgrade to a release greater than or equal to 10.5.1 Jira Service Management Data Center 10.5: Upgrade to a release greater than or equal to 10.5.1 See the release notes. You can download the latest version of Jira Core Data Center and Jira Service Management Data Center from the download center. This vulnerability was reported via our Atlassian (Internal) program.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00691 53rd percentileScored 2026-11-07
Fix Fixed Jira Core Data Center (Atlassian): 10.6.0, 10.5.1, 10.3.5 to 10.3.6 +1Jira Core Server (Atlassian): 9.12.22 to 9.12.23+2 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
AtlassianJira Core Data Center10.5.0; 10.4.0 to 10.4.1; 10.3.0 to 10.3.4; 9.12.0 to 9.12.1910.6.0, 10.5.1, 10.3.5 to 10.3.6, 9.12.22 to 9.12.23Patch availableCNA
AtlassianJira Core Server9.12.0 to 9.12.199.12.22 to 9.12.23Patch availableCNA
AtlassianJira Service Management Data Center10.5.0; 10.4.0 to 10.4.1; 10.3.0 to 10.3.4; 5.12.0 to 5.12.1910.6.0, 10.5.1, 10.3.5 to 10.3.6, 5.12.22 to 5.12.23Patch availableCNA
AtlassianJira Service Management Server5.12.0 to 5.12.195.12.22 to 5.12.23Patch availableCNA
  • Jira Core Data Center VendorAtlassian Affected 10.5.0; 10.4.0 to 10.4.1; 10.3.0 to 10.3.4; 9.12.0 to 9.12.19 Fixed in 10.6.0, 10.5.1, 10.3.5 to 10.3.6, 9.12.22 to 9.12.23 Patch available CNA
  • Jira Core Server VendorAtlassian Affected 9.12.0 to 9.12.19 Fixed in 9.12.22 to 9.12.23 Patch available CNA
  • Jira Service Management Data Center VendorAtlassian Affected 10.5.0; 10.4.0 to 10.4.1; 10.3.0 to 10.3.4; 5.12.0 to 5.12.19 Fixed in 10.6.0, 10.5.1, 10.3.5 to 10.3.6, 5.12.22 to 5.12.23 Patch available CNA
  • Jira Service Management Server VendorAtlassian Affected 5.12.0 to 5.12.19 Fixed in 5.12.22 to 5.12.23 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:*5.12.0 to before 5.12.20; 9.12.0 to before 9.12.20; 10.3.0 to before 10.3.5; 10.4.0 to before 10.5.1VulnerableAtlassian
cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*9.12.0 to before 9.12.20; 10.3.0 to before 10.3.5; 10.4.0 to before 10.5.1VulnerableAtlassian
  • cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:* Versions 5.12.0 to before 5.12.20; 9.12.0 to before 9.12.20; 10.3.0 to before 10.3.5; 10.4.0 to before 10.5.1 Vulnerable ·Atlassian
  • cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:* Versions 9.12.0 to before 9.12.20; 10.3.0 to before 10.3.5; 10.4.0 to before 10.5.1 Vulnerable ·Atlassian

Remediation

  • Fix · CNA Jira Core Data Center (Atlassian) Fixed in 10.6.0, 10.5.1, 10.3.5 to 10.3.6, 9.12.22 to 9.12.23
  • Fix · CNA Jira Core Server (Atlassian) Fixed in 9.12.22 to 9.12.23
  • Fix · CNA Jira Service Management Data Center (Atlassian) Fixed in 10.6.0, 10.5.1, 10.3.5 to 10.3.6, 5.12.22 to 5.12.23
  • Fix · CNA Jira Service Management Server (Atlassian) Fixed in 5.12.22 to 5.12.23

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-22157
  2. 2026-10-03 Alias added: GHSA-352j-376q-2pmc

References

Patch 2

Advisory 1

  • TI-2026-67904 Arbitrary file access in Atlassian Data Center products KEVCVSS 4.0CRITICAL 9.3
  • TI-2022-00460 Improper authentication in Atlassian Jira Core Server CVSS 3.1CRITICAL 9.8
  • TI-2024-14399 Code injection in Atlassian Confluence Data Center CVSS 3.1HIGH 8.8
  • TI-2021-08038 Path traversal in Atlassian Jira Server KEVCVSS 3.1MEDIUM 5.3
  • TI-2020-18559 Missing authorization in Atlassian Jira Data Center CVSS 3.1CRITICAL 9.8
  • TI-2020-18587 Incorrect authorization in Atlassian Jira Server CVSS 3.1MEDIUM 5.3
See all 79 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences