InfoSecBulletin Cybersecurity for mankind
A recently discovered vulnerability, CVE-2025-22157, threatens organizations using Atlassian’s Jira Core Data Center and Jira Service Management Data Center by enabling privilege escalation attacks, allowing attackers to gain elevated system privileges.
This serious flaw has a CVSS score of 7.2, posing a significant risk to businesses using Atlassian’s project and service management platforms.
Daily Cyber security update for 14.11. 2026
Huge European telecom leak exposes clients of Swedbank, SEB, airBaltic, and other companies
PHP2Shell attack exploited a Check Point 0-day to deploy malware
North Korean hackers steal more than $400 million using video images, FBI says
Microsoft’s November 2026 Patch Tuesday addresses 1,093 flaws, with Outlook zero-day
Barracuda ESG flaws exploited, gaining root access
Apple, SAP, and Ivanti Patch Critical flaws Affecting Messaging, Bluetooth, and Enterprise Systems
Jailbroken DeepSeek AI Agent Conducts Two-Week Cyberattack on European Telecom
Daily Cyber security update for 10.11. 2026
IBM fixes 208 API Connect vulnerabilities, 47 critical
According to Atlassian’s advisory, the vulnerability “allows an attacker to perform actions as a higher-privileged user.”
This means that someone with low-level access could increase their privileges and get admin rights or access restricted areas in Jira.
The vulnerability was introduced in the Jira Core Data Center versions 9.12.0, 10.3.0, 10.4.0, and 10.5.0. And the Jira Service Management Data Center versions 5.12.0, 10.3.0, 10.4.0, and 10.5.0
Atlassian advises all affected users to upgrade immediately. If a full upgrade isn’t feasible, it’s crucial to patch to a supported fixed version.
Jira Core Data Center
9.12.x → Upgrade to ≥ 9.12.20
10.3.x → Upgrade to ≥ 10.3.5
10.5.x → Upgrade to ≥ 10.5.1
10.6.x → Upgrade to ≥ 10.6.0
Jira Service Management Data Center
5.12.x → Upgrade to ≥ 9.12.20
10.3.x → Upgrade to ≥ 10.3.5
10.5.x → Upgrade to ≥ 10.5.1
10.6.x → Upgrade to ≥ 10.6.0
