cyberark vulnerabilities
20 published CVEs name cyberark among the affected products.
- 20Published CVEs20 of them scored
- 1Last 12 monthspublished in the last year
- 3Critical5 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-13762
Client-Side Denial of Service Condition in SWS Extension prior to version 2.2.30305
CyberArk · CyberArk Secure Web Sessions Extension
Medium4.8 - CVE-2025-46382
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CyberArk · IDP
Medium5.3 - CVE-2025-49831
Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) vulnerable to IAM Authenticator Bypass via Mis-configured Network Device
cyberark · conjur
Critical9.1 - CVE-2025-49830
Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) vulnerable to path traversal and file disclosure
cyberark · conjur
High7.1 - CVE-2025-49829
Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) missing validations
cyberark · conjur
Medium6.0 - CVE-2025-49828
Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) Vulnerable to Remote Code Execution
cyberark · conjur
High8.6 - CVE-2025-49827
Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) Vulnerable to Bypass of IAM Authenticator
cyberark · conjur
Critical9.1 - CVE-2025-22274
HTML injection in CyberArk Endpoint Privilege Manager
CyberArk · Endpoint Privilege Manager
Low2.0 - CVE-2025-22273
Lack of rate-limiting in password change mechanism in CyberArk Endpoint Privilege Manager
CyberArk · Endpoint Privilege Manager
Critical9.3 - CVE-2025-22272
Self Reflected XSS in CyberArk Endpoint Privilege Manager
CyberArk · Endpoint Privilege Manager
Low2.1