UpHeron
All vulnerabilities

Servers and applications

CVE-2025-22167

This High severity Path Traversal (Arbitrary Write) vulnerability was introduced in versions: 9.12.0, 10.3.0 and remain present in 11.0.0 of Jira Software Data Center and Server. This Path Traversal (Arbitrary Write) vulnerability, with a CVSS Score of 8.7, allows an attacker to modify any filesystem path writable by the Jira JVM process. Atlassian recommends that Jira Software Data Center and…

Severity
High 8.7
Published
22 Oct 2025
Last changed
18 Oct 2026
Added to UpHeron
1 Nov 2026
Fixed in
9.12.28, 10.3.12, 11.1.0
Sources
NVD

Affected software

SoftwareAffected versions
JiraServers and applications · cpe:a:atlassian:jira_data_center
  • From 9.12.0 before 9.12.28
  • From 10.3.0 before 10.3.12
  • From 11.0.0 before 11.1.0
JiraServers and applications · cpe:a:atlassian:jira_server
  • From 9.12.0 before 9.12.28
  • From 10.3.0 before 10.3.12
  • From 11.0.0 before 11.1.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-22167
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-22167