Atlassian Jira Align vulnerabilities

13 CVEs affecting Atlassian Jira Align, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-22178, published 2025-10-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-36802, published 2022-10-14. Medium severity, CVSS 4.9. EPSS: 1% chance of exploitation in the next 30 days. The ManageJiraConnectors API in Atlassian Jira Align before version 10.109.2 allows remote attackers to exploit this issue to access internal network resources via a Server-Side Request Forgery. This…
CVE-2022-36803, published 2022-10-14. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. The MasterUserEdit API in Atlassian Jira Align Server before version 10.109.2 allows An authenticated attacker with the People role permission to use the MasterUserEdit API to modify any users role…
CVE-2025-22178, published 2025-10-22. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able…
CVE-2025-22177, published 2025-10-22. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able…
CVE-2025-22176, published 2025-10-22. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able…
CVE-2025-22174, published 2025-10-22. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able…
CVE-2025-22173, published 2025-10-22. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able…
CVE-2025-22172, published 2025-10-22. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able…
CVE-2025-22170, published 2025-10-22. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. Jira Align is vulnerable to an authorization issue. A low-privilege user without sufficient privileges to perform an action could if they included a particular state-related parameter of a user with…
CVE-2025-22168, published 2025-10-22. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able…

Latest

CVE-2025-22175, published 2025-10-22. Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days. Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able…
CVE-2025-22171, published 2025-10-22. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. Jira Align is vulnerable to an authorization issue. A low-privilege user is able to alter the private checklists of other users.
CVE-2025-22169, published 2025-10-22. Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days. Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able…