cyberark vulnerabilities

CVEs per yearBy the year they were published

1. 20201
2. 20211
3. 20244
4. 202514

Newest CVEs

• CVE-2025-13762

  Client-Side Denial of Service Condition in SWS Extension prior to version 2.2.30305

  CyberArk · CyberArk Secure Web Sessions Extension

  Medium4.8
• CVE-2025-46382

  CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

  CyberArk · IDP

  Medium5.3
• CVE-2025-49831

  Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) vulnerable to IAM Authenticator Bypass via Mis-configured Network Device

  cyberark · conjur

  Critical9.1
• CVE-2025-49830

  Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) vulnerable to path traversal and file disclosure

  cyberark · conjur

  High7.1
• CVE-2025-49829

  Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) missing validations

  cyberark · conjur

  Medium6.0
• CVE-2025-49828

  Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) Vulnerable to Remote Code Execution

  cyberark · conjur

  High8.6
• CVE-2025-49827

  Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) Vulnerable to Bypass of IAM Authenticator

  cyberark · conjur

  Critical9.1
• CVE-2025-22274

  HTML injection in CyberArk Endpoint Privilege Manager

  CyberArk · Endpoint Privilege Manager

  Low2.0
• CVE-2025-22273

  Lack of rate-limiting in password change mechanism in CyberArk Endpoint Privilege Manager

  CyberArk · Endpoint Privilege Manager

  Critical9.3
• CVE-2025-22272

  Self Reflected XSS in CyberArk Endpoint Privilege Manager

  CyberArk · Endpoint Privilege Manager

  Low2.1