Cyberark
24 CVEs across 17 Cyberark products. Browse Cyberark vulnerabilities, severities, and proof-of-concept exploits.
Cyberark products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-2914 | High | 7.8 | 2026-02-25 | CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized privilege elevation leveraging CyberArk elevation dialogs |
CVE-2025-66374 | High | 7.8 | 2026-02-03 | CyberArk Endpoint Privilege Manager Agent through 25.10.0 allows a local user to achieve privilege escalation through policy elevation of an Administration tas… |
CVE-2025-13762 | | 2025-11-27 | Improper Input Validation vulnerability in CyberArk CyberArk Secure Web Sessions Extension on Chrome, Edge allows Denial of Service when trying to starting new… | |
CVE-2025-46382 | Medium | 5.3 | 2025-07-20 | CWE-200 Exposure of Sensitive Information to an Unauthorized Actor |
CVE-2025-49831 | Critical | 9.8 | 2025-07-15 | An attacker of Secrets Manager, Self-Hosted installations that route traffic from Secrets Manager to AWS through a misconfigured network device can reroute aut… |
CVE-2025-49830 | Medium | 6.5 | 2025-07-15 | Conjur provides secrets management and application identity for infrastructure. An authenticated attacker who is able to load policy can use the policy yaml pa… |
CVE-2025-49829 | Medium | 6.5 | 2025-07-15 | Conjur provides secrets management and application identity for infrastructure. Missing validations in Secrets Manager, Self-Hosted allows authenticated attack… |
CVE-2025-49828 | High | 8.8 | 2025-07-15 | Conjur provides secrets management and application identity for infrastructure. Conjur OSS versions 1.19.5 through 1.21.1 and Secrets Manager, Self-Hosted (for… |
CVE-2025-49827 | Critical | 9.8 | 2025-07-15 | Conjur provides secrets management and application identity for infrastructure. Conjur OSS versions 1.19.5 through 1.22.0 and Secrets Manager, Self-Hosted (for… |
CVE-2025-22274 | | 2025-02-28 | It is possible to inject HTML code into the page content using the "content" field in the "Application definition" page. This issue affects CyberArk Endpoint… | |
CVE-2025-22273 | | 2025-02-28 | Application does not limit the number or frequency of user interactions, such as the number of incoming requests. At the "/EPMUI/VfManager.asmx/ChangePassword"… | |
CVE-2025-22272 | | 2025-02-28 | In the "/EPMUI/ModalDlgHandler.ashx?value=showReadonlyDlg" endpoint, it is possible to inject code in the "modalDlgMsgInternal" parameter via POST, which is th… | |
CVE-2025-22271 | | 2025-02-28 | The application or its infrastructure allows for IP address spoofing by providing its own value in the "X-Forwarded-For" header. Thus, the action logging mecha… | |
CVE-2025-22270 | | 2025-02-28 | An attacker with access to the Administration panel, specifically the "Role Management" tab, can inject code by adding a new role in the "name" field. It shoul… | |
CVE-2024-57967 | Medium | 4.2 | 2025-02-03 | PVWA (Password Vault Web Access) in CyberArk Privileged Access Manager Self-Hosted before 14.4 has potentially elevated privileges in LDAP mapping. |
CVE-2024-54840 | Medium | 4.2 | 2025-02-03 | PVWA (Password Vault Web Access) in CyberArk Privileged Access Manager Self-Hosted before 14.4 does not properly address environment issues that can contribute… |
CVE-2024-42340 | High | 8.3 | 2024-08-25 | CyberArk - CWE-602: Client-Side Enforcement of Server-Side Security |
CVE-2024-42339 | Medium | 4.3 | 2024-08-25 | CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor |
CVE-2024-42338 | Medium | 4.3 | 2024-08-25 | CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor |
CVE-2024-42337 | Medium | 4.3 | 2024-08-25 | CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor |
CVE-2017-11197 | High | 7.8 | 2023-05-03 | In CyberArk Viewfinity 5.5.10.95 and 6.x before 6.1.1.220, a low privilege user can escalate to an administrative user via a bug within the "add printer" optio… |
CVE-2022-22700 | Medium | 5.3 | 2022-03-03 | CyberArk Identity versions up to and including 22.1 in the 'StartAuthentication' resource, exposes the response header 'X-CFY-TX-TM'. In certain configurations… |
CVE-2021-44049 | High | 7.8 | 2022-01-15 | CyberArk Endpoint Privilege Manager (EPM) through 11.5.3.328 before 2021-12-20 allows a local user to gain elevated privileges via a Trojan horse Procmon64.exe… |
CVE-2021-31798 | Medium | 4.4 | 2021-09-02 | The effective key space used to encrypt the cache in CyberArk Credential Provider prior to 12.1 has low entropy, and under certain conditions a local malicious… |
CVE-2021-31796 | High | 7.5 | 2021-09-02 | An inadequate encryption vulnerability discovered in CyberArk Credential Provider before 12.1 may lead to Information Disclosure. An attacker may realistically… |
CVE-2021-31797 | Medium | 5.1 | 2021-09-02 | The user identification mechanism used by CyberArk Credential Provider prior to 12.1 is susceptible to a local host race condition, leading to password disclos… |
CVE-2021-37151 | Medium | 5.3 | 2021-09-01 | CyberArk Identity 21.5.131, when handling an invalid authentication attempt, sometimes reveals whether the username is valid. In certain authentication policy… |
CVE-2020-25738 | Medium | 5.5 | 2020-11-27 | CyberArk Endpoint Privilege Manager (EPM) 11.1.0.173 allows attackers to bypass a Credential Theft protection mechanism by injecting a DLL into a process that… |
CVE-2020-25374 | Low | 2.6 | 2020-10-28 | CyberArk Privileged Session Manager (PSM) 10.9.0.15 allows attackers to discover internal pathnames by reading an error popup message after two hours of idle t… |
CVE-2020-4062 | High | 8.7 | 2020-06-22 | In Conjur OSS Helm Chart before 2.0.0, a recently identified critical vulnerability resulted in the installation of the Conjur Postgres database with an open p… |
CVE-2019-3800 | Medium | 6.3 | 2019-08-05 | CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with --client-cred… |
CVE-2019-7442 | Critical | 9.8 | 2019-05-08 | An XML external entity (XXE) vulnerability in the Password Vault Web Access (PVWA) of CyberArk Enterprise Password Vault <=10.7 allows remote attackers to read… |
CVE-2018-14894 | High | 7.8 | 2019-04-09 | CyberArk Endpoint Privilege Manager 10.2.1.603 and earlier allows an attacker (who is able to edit permissions of a file) to bypass intended access restriction… |
CVE-2019-9627 | High | 7.0 | 2019-03-08 | A buffer overflow in the kernel driver CybKernelTracker.sys in CyberArk Endpoint Privilege Manager versions prior to 10.7 allows an attacker (without Administr… |
CVE-2018-13052 | Critical | 9.8 | 2018-07-05 | In CyberArk Endpoint Privilege Manager (formerly Viewfinity), Privilege Escalation is possible if the attacker has one process that executes as Admin. |
CVE-2018-12903 | Medium | 5.4 | 2018-06-26 | In CyberArk Endpoint Privilege Manager (formerly Viewfinity) 10.2.1.603, there is persistent XSS via an account name on the create token screen, the VfManager… |
CVE-2018-9843 | Critical | 9.8 | 2018-04-12 | The REST API in CyberArk Password Vault Web Access before 9.9.5 and 10.x before 10.1 allows remote attackers to execute arbitrary code via a serialized .NET ob… |
CVE-2018-9842 | Medium | 5.3 | 2018-04-12 | CyberArk Password Vault before 9.7 allows remote attackers to obtain sensitive information from process memory by replaying a logon message. |