CVE-2025-22169

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to subscribe to an item/object without having the expected permission level...

CVE-2025-22174

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view portfolio rooms without the required permission...

CVE-2025-22173

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view certain sprint data without the required permission...

CVE-2025-22178

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view items on the "Why" page...

CVE-2025-22174

CVE-2025-22174 describes an authorization issue in Atlassian Jira Align where a low-privilege user can access endpoints that disclose a small amount of sensitive information. The provided documents consistently cite that a low-level user could view portfolio rooms without the required permission,...

CVE-2025-22169

CVE-2025-22169 affects Atlassian Jira Align. Multiple connected sources describe an authorization flaw where a low-privilege user can access endpoints that disclose limited sensitive information, including subscribing to an item/object without the expected permissions. This once again confirms an...

CVE-2025-22174

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view portfolio rooms without the required permission...

CVE-2025-22169

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to subscribe to an item/object without having the expected permission level...

CVE-2025-22172

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to read external reports without the required permission...

CVE-2025-22172

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to read external reports without the required permission...

CVE-2025-22172

CVE-2025-22172 affects Atlassian Jira Align. The issue is an authorization flaw that lets a low-privilege user access unexpected endpoints and disclose a small amount of sensitive information, exemplified by reading external reports without required permission. The description and connected sourc...

CVE-2025-22176

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view audit log items...

CVE-2025-22176

CVE-2025-22176 describes Jira Align suffering an authorization issue where a low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information (e.g., viewing audit log items). The affected product is Jira Align; the underlying cause is described as an author...

CVE-2025-22175

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to modify the steps of another user's private checklist...

CVE-2025-22177

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view other team overviews...

CVE-2025-22175

Jira Align exposes an authorization issue where a low-privilege user can access endpoints that disclose a small amount of sensitive information. In a concrete example, a low-level user was able to modify the steps of another user’s private checklist. The CVE-2025-22175 entry is consistently descr...

EUVD-2025-35607

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view other team overviews...

CVE-2025-22168

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to read the steps of another user's private checklist...

CVE-2025-22177

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view other team overviews...

CVE-2025-22168

CVE-2025-22168 affects Jira Align. The issue is an authorization flaw that allows a low-privilege user to access unexpected endpoints and disclose a small amount of sensitive information, such as a low-level user reading another user’s private checklist steps. Documented impact indicates informat...