Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2025-22168 | 5.3 medium | 0.00% | atlassian, jira_align | Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to read the steps of another user's private checklist. | 8 Oct |
| CVE-2025-22169 | 5.3 medium | 0.00% | atlassian, jira_align | Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to subscribe to an item/object without having the expected permission level. | 8 Oct |
| CVE-2025-22170 | 5.3 medium | 0.00% | atlassian, jira_align | Jira Align is vulnerable to an authorization issue. A low-privilege user without sufficient privileges to perform an action could if they included a particular state-related parameter of a user with sufficient privileges to perform the action. | 8 Oct |
| CVE-2025-22171 | 5.3 medium | 0.00% | atlassian, jira_align | Jira Align is vulnerable to an authorization issue. A low-privilege user is able to alter the private checklists of other users. | 8 Oct |
| CVE-2025-22172 | 5.3 medium | 0.00% | atlassian, jira_align | Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to read external reports without the required permission. | 8 Oct |
| CVE-2025-22173 | 5.3 medium | 0.00% | atlassian, jira_align | Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view certain sprint data without the required permission. | 8 Oct |
| CVE-2025-22174 | 5.3 medium | 0.00% | atlassian, jira_align | Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view portfolio rooms without the required permission. | 8 Oct |
| CVE-2025-22175 | 5.3 medium | 0.00% | atlassian, jira_align | Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to modify the steps of another user's private checklist. | 8 Oct |
| CVE-2025-22176 | 5.3 medium | 0.00% | atlassian, jira_align | Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view audit log items. | 8 Oct |
| CVE-2025-22177 | 5.3 medium | 0.00% | atlassian, jira_align | Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view other team overviews. | 8 Oct |
| CVE-2025-22178 | 5.3 medium | 0.00% | atlassian, jira_align | Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view items on the "Why" page. | 8 Oct |
11 of 11
Download these 11 as CSV · subscribe to this list.
EPSS scores: 2026-10-27. NVD cursor: 2026-10-28 23:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.