Log in Start free

CyberArk

Products

ProductCVEsExploitedLatest
conjur5–Jul 15, 2025
Endpoint Privilege Manager5–Feb 28, 2025
CyberArk Identity Management4–Aug 25, 2024
Privileged Access Manager2–Feb 3, 2025
CyberArk Secure Web Sessions Extension1–Nov 27, 2025
Identity1–Sep 1, 2021
IDP1–Jul 20, 2025
Conjur OSS Helm Chart1–Jun 22, 2020

Exploited and recent CVEs

  • CVE-2025-13762 Medium 4.8 Client-Side Denial of Service Condition in SWS Extension prior to version 2.2.30305 0.2%
  • CVE-2025-46382 Medium 5.3 CWE-200 Exposure of Sensitive Information to an Unauthorized Actor 0.3%
  • CVE-2025-49831 Critical 9.1 Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) vulnerable to IAM Authenticator Bypass via Mis-configured Network Device 1.2%
  • CVE-2025-49830 High 7.1 Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) vulnerable to path traversal and file disclosure 0.6%
  • CVE-2025-49829 Medium 6.0 Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) missing validations 0.5%
  • CVE-2025-49828 High 8.6 Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) Vulnerable to Remote Code Execution 2.2%
  • CVE-2025-49827 Critical 9.1 Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) Vulnerable to Bypass of IAM Authenticator 1.4%
  • CVE-2025-22274 Low 2.0 HTML injection in CyberArk Endpoint Privilege Manager 0.5%
  • CVE-2025-22273 Critical 9.3 Lack of rate-limiting in password change mechanism in CyberArk Endpoint Privilege Manager 0.6%
  • CVE-2025-22272 Low 2.1 Self Reflected XSS in CyberArk Endpoint Privilege Manager 0.5%
  • CVE-2025-22271 Medium 6.9 IP Spoofing in CyberArk Endpoint Privilege Manager 0.4%
  • CVE-2025-22270 High 7.3 Stored XSS in CyberArk Endpoint Privilege Manager 0.6%
  • CVE-2024-54840 Medium 4.2 PVWA (Password Vault Web Access) in CyberArk Privileged Access Manager Self-Hosted before 14.4 does not properly address environment issues that can contribute to Host header injection. 0.2%
  • CVE-2024-57967 Medium 4.2 PVWA (Password Vault Web Access) in CyberArk Privileged Access Manager Self-Hosted before 14.4 has potentially elevated privileges in LDAP mapping. 0.2%
  • CVE-2024-42340 High 8.3 CyberArk - CWE-602: Client-Side Enforcement of Server-Side Security 0.3%
  • CVE-2024-42339 Medium 4.3 CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor 0.3%
  • CVE-2024-42338 Medium 4.3 CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor 0.3%
  • CVE-2024-42337 Medium 4.3 CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor 0.3%
  • CVE-2021-37151 Unrated CyberArk Identity 21.5.131, when handling an invalid authentication attempt, sometimes reveals whether the username is valid. In certain authentication policy configurations with MFA, the API response 0.9%
  • CVE-2020-4062 High 8.7 Improper Access Control in Conjur OSS Helm Chart 1.4%