Home Atlassian CVE-2025-22157
Back to Atlassian

CVE-2025-22157

Jira Core Data Center and Server - Jira Core

Atlassian CVSS 8.8 Updated April 6, 2026

Executive Risk Summary

"A High severity Privilege Escalation vulnerability exists in Jira Core Data Center and Server, allowing an attacker to perform actions as a higher-privileged user. Affected versions include 9.12.0, 10.3.0, 10.4.0, and 10.5.0, and users are recommended to upgrade to the latest version or a specified supported fixed version."

Anticipated Attack Path

  1. 1. Exploitation of the Privilege Escalation vulnerability
  2. 2. Elevation of privileges to a higher-privileged user
  3. 3. Potential unauthorized access to sensitive data and systems

Am I Vulnerable?

  • Verify the version of Jira Core Data Center and Server
  • Check for the presence of the vulnerability
  • Apply the recommended patch or upgrade to a supported fixed version

Operational Audit Arsenal

Target Type Java-based web application
Target Asset jira-core.jar
Standard Path /opt/atlassian/jira/lib

Manual Verification Required

This is a non-Windows asset (Atlassian). Use the target asset details and official path provided above to verify your current version against the official vendor advisories listed below.

Patch Impact Forecast

Reboot Required Likely

Potential disruption to Jira services during the upgrade process

Internal Work Notes

High severity Privilege Escalation vulnerability in Jira Core Data Center and Server, requiring immediate attention and patching to prevent potential security breaches.

Technical Intelligence & Operational Utilities • Delivered Weekly

Intelligence Sources

Related Atlassian Threats

Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.