Skip to content

Cyberark vulnerabilities

Products

Newest

cyberark endpoint privilege manager, cyberark software, a palo alto networks company endpoint privilege manager agent +1 more CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized... CVE-2026-2914 8.5 HighFebruary 25, 2026
cyberark endpoint privilege manager CyberArk Endpoint Privilege Manager Agent through 25.10.0 allows a local user to achieve... CVE-2025-66374 7.8 HighFebruary 3, 2026
cyberark secure web sessions extension Client-Side Denial of Service Condition in SWS Extension prior to version 2.2.30305 CVE-2025-13762 4.8 MediumNovember 27, 2025
cyberark idp CWE-200 Exposure of Sensitive Information to an Unauthorized Actor CVE-2025-46382 5.3 MediumJuly 20, 2025
cyberark conjur Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) vulnerable to IAM Authenticator Bypass via Mis-configured Network Device CVE-2025-49831 9.1 CriticalJuly 15, 2025
cyberark conjur Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) vulnerable to path traversal and file disclosure CVE-2025-49830 7.1 HighJuly 15, 2025
cyberark conjur Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) missing validations CVE-2025-49829 6.0 MediumJuly 15, 2025
cyberark conjur Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) Vulnerable to Remote Code Execution CVE-2025-49828 8.6 HighJuly 15, 2025
cyberark conjur Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) Vulnerable to Bypass of IAM Authenticator CVE-2025-49827 9.1 CriticalJuly 15, 2025
cyberark endpoint privilege manager HTML injection in CyberArk Endpoint Privilege Manager CVE-2025-22274 2.0 LowFebruary 28, 2025
cyberark endpoint privilege manager Lack of rate-limiting in password change mechanism in CyberArk Endpoint Privilege Manager CVE-2025-22273 9.3 CriticalFebruary 28, 2025
cyberark endpoint privilege manager Self Reflected XSS in CyberArk Endpoint Privilege Manager CVE-2025-22272 2.1 LowFebruary 28, 2025
cyberark endpoint privilege manager IP Spoofing in CyberArk Endpoint Privilege Manager CVE-2025-22271 6.9 MediumFebruary 28, 2025
cyberark endpoint privilege manager Stored XSS in CyberArk Endpoint Privilege Manager CVE-2025-22270 7.3 HighFebruary 28, 2025
cyberark privileged access manager PVWA (Password Vault Web Access) in CyberArk Privileged Access Manager Self-Hosted before 14.4... CVE-2024-57967 4.2 MediumFebruary 3, 2025
cyberark privileged access manager PVWA (Password Vault Web Access) in CyberArk Privileged Access Manager Self-Hosted before 14.4... CVE-2024-54840 4.2 MediumFebruary 3, 2025
cyberark identity management, identity +1 more CyberArk - CWE-602: Client-Side Enforcement of Server-Side Security CVE-2024-42340 8.3 HighAugust 25, 2024
cyberark identity management, identity +1 more CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CVE-2024-42339 4.3 MediumAugust 25, 2024
cyberark identity management, identity +1 more CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CVE-2024-42338 4.3 MediumAugust 25, 2024
cyberark identity management, identity +1 more CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CVE-2024-42337 4.3 MediumAugust 25, 2024
cyberark viewfinity In CyberArk Viewfinity 5.5.10.95 and 6.x before 6.1.1.220, a low privilege user can escalate to... CVE-2017-11197 Public exploit 7.8 HighMay 3, 2023
cyberark identity CyberArk Identity versions up to and including 22.1 in the 'StartAuthentication' resource,... CVE-2022-22700 5.3 MediumMarch 3, 2022
cyberark endpoint privilege manager CyberArk Endpoint Privilege Manager (EPM) through 11.5.3.328 before 2021-12-20 allows a local... CVE-2021-44049 7.8 HighJanuary 15, 2022
cyberark credential provider An inadequate encryption vulnerability discovered in CyberArk Credential Provider before 12.1 may... CVE-2021-31796 Public exploit 7.5 HighSeptember 2, 2021
cyberark credential provider The effective key space used to encrypt the cache in CyberArk Credential Provider prior to 12.1... CVE-2021-31798 4.4 MediumSeptember 2, 2021
cyberark credential provider The user identification mechanism used by CyberArk Credential Provider prior to 12.1 is... CVE-2021-31797 5.1 MediumSeptember 1, 2021
cyberark identity CyberArk Identity 21.5.131, when handling an invalid authentication attempt, sometimes reveals... CVE-2021-37151 5.3 MediumSeptember 1, 2021
cyberark endpoint privilege manager CyberArk Endpoint Privilege Manager (EPM) 11.1.0.173 allows attackers to bypass a Credential... CVE-2020-25738 5.5 MediumNovember 27, 2020
cyberark privileged session manager CyberArk Privileged Session Manager (PSM) 10.9.0.15 allows attackers to discover internal... CVE-2020-25374 2.6 LowOctober 28, 2020
cyberark conjur oss helm chart Improper Access Control in Conjur OSS Helm Chart CVE-2020-4062 8.7 HighJune 22, 2020
cloud foundry cf cli, anynines elasticsearch, logme +45 more +47 more CF CLI writes the client id and secret to config file CVE-2019-3800 6.3 MediumAugust 5, 2019
cyberark enterprise password vault An XML external entity (XXE) vulnerability in the Password Vault Web Access (PVWA) of CyberArk... CVE-2019-7442 Public exploit EPSS 40.0% 9.8 CriticalMay 8, 2019
cyberark endpoint privilege manager CyberArk Endpoint Privilege Manager 10.2.1.603 and earlier allows an attacker (who is able to... CVE-2018-14894 Public exploit 7.8 HighApril 9, 2019
cyberark endpoint privilege manager A buffer overflow in the kernel driver CybKernelTracker.sys in CyberArk Endpoint Privilege... CVE-2019-9627 7.0 HighMarch 8, 2019
cyberark endpoint privilege manager In CyberArk Endpoint Privilege Manager (formerly Viewfinity), Privilege Escalation is possible if... CVE-2018-13052 9.8 CriticalJuly 5, 2018
cyberark endpoint privilege manager In CyberArk Endpoint Privilege Manager (formerly Viewfinity) 10.2.1.603, there is persistent XSS... CVE-2018-12903 5.4 MediumJune 26, 2018
cyberark password vault The REST API in CyberArk Password Vault Web Access before 9.9.5 and 10.x before 10.1 allows... CVE-2018-9843 Public exploit EPSS 16.7% 9.8 CriticalApril 12, 2018
cyberark password vault CyberArk Password Vault before 9.7 allows remote attackers to obtain sensitive information from... CVE-2018-9842 Public exploit EPSS 15.9% 5.3 MediumApril 12, 2018