UpHeron
All vulnerabilities

Servers and applications

CVE-2025-22157

This High severity PrivEsc (Privilege Escalation) vulnerability was introduced in versions: 9.12.0, 10.3.0, 10.4.0, and 10.5.0 of Jira Core Data Center and Server 5.12.0, 10.3.0, 10.4.0, and 10.5.0 of Jira Service Management Data Center and Server This PrivEsc (Privilege Escalation) vulnerability, with a CVSS Score of 7.2, allows an attacker to perform actions as a higher-privileged user.…

Severity
High 7.2
Published
20 May 2025
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
5.12.20, 9.12.20, 10.3.5, 10.5.1
Sources
NVD

Affected software

SoftwareAffected versions
JiraServers and applications · cpe:a:atlassian:jira_data_center
  • From 5.12.0 before 5.12.20
  • From 9.12.0 before 9.12.20
  • From 10.3.0 before 10.3.5
  • From 10.4.0 before 10.5.1
JiraServers and applications · cpe:a:atlassian:jira_server
  • From 9.12.0 before 9.12.20
  • From 10.3.0 before 10.3.5
  • From 10.4.0 before 10.5.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-22157
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-22157