Analysis Summary

CVE-2025-22157 CVSS:7.2

Atlassian Jira Core Data Center and Server and Jira Service Management Data Center and Server could allow a remote authenticated attacker to gain elevated privileges on the system.

CVE-2023-22514 CVSS:7.8

Atlassian Sourcetree for Mac and Sourcetree for Windows could allow a local attacker to execute arbitrary code which has high impact to confidentiality, high impact to integrity, high impact to availability, and requires user interaction.

CVE-2024-21703 CVSS:6.4

Atlassian Confluence Data Center could allow a remote authenticated attacker to gain elevated privileges on the system, caused by improper access control in confluence.cfg.xml configuration file. By sending a specially crafted request, an attacker could exploit this vulnerability to escalate privileges.

CVE-2024-21697 CVSS:8.8

Atlassian Sourcetree for Windows and Mac could allow a remote attacker to execute arbitrary code on the system, caused by an unspecified flaw. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system.

Impact

• Code Execution
• Privilege Escalation

Indicators of Compromise

CVE

• CVE-2025-22157

• CVE-2023-22514

• CVE-2024-21703

• CVE-2024-21697

Affected Vendors

Remediation

Refer to Atlassian Security Advisory for patch, upgrade or suggested workaround information.

CVE-2025-22157

CVE-2023-22514

CVE-2024-21703

CVE-2024-21697