Jira Align (Atlassian) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 67 known versions, newest CVE from 2025-10-22. Vendor: Atlassian.
CVEs of Jira Align
- CVE-2025-22176 - CVSS 5.3 (medium), 2025-10-22: Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive…
- CVE-2025-22178 - CVSS 5.3 (medium), 2025-10-22: Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive…
- CVE-2025-22177 - CVSS 5.3 (medium), 2025-10-22: Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive…
- CVE-2025-22170 - CVSS 5.3 (medium), 2025-10-22: Jira Align is vulnerable to an authorization issue. A low-privilege user without sufficient privileges to perform an action could if they included a…
- CVE-2025-22173 - CVSS 5.3 (medium), 2025-10-22: Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive…
- CVE-2025-22169 - CVSS 5.4 (medium), 2025-10-22: Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive…
- CVE-2025-22172 - CVSS 5.3 (medium), 2025-10-22: Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive…
- CVE-2025-22175 - CVSS 5.4 (medium), 2025-10-22: Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive…
- CVE-2025-22168 - CVSS 5.3 (medium), 2025-10-22: Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive…
- CVE-2025-22171 - CVSS 5.3 (medium), 2025-10-22: Jira Align is vulnerable to an authorization issue. A low-privilege user is able to alter the private checklists of other users.
- CVE-2025-22174 - CVSS 5.3 (medium), 2025-10-22: Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive…
- CVE-2022-36803 - CVSS 8.8 (high), 2022-10-14: The MasterUserEdit API in Atlassian Jira Align Server before version 10.109.2 allows An authenticated attacker with the People role permission to use the…
- CVE-2022-36802 - CVSS 4.9 (medium), 2022-10-14: The ManageJiraConnectors API in Atlassian Jira Align before version 10.109.2 allows remote attackers to exploit this issue to access internal network…
