VULNERABILITY INTELLIGENCE

CVE-2025-22174

CVSS score5.3 MEDIUM

EPSS probability0.21%

CISA KEVNot currently listed

Published2025-10-22

Last modified2026-10-08

Description

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view portfolio rooms without the required permission.