Skip to content
OpenAdvisories

Vendor

cyberark

20 known vulnerabilities.

Products

conjur 5 Endpoint Privilege Manager 5 CyberArk Identity Management 4 Privileged Access Manager 2 CyberArk Secure Web Sessions Extension 1 Identity 1 IDP 1 Conjur OSS Helm Chart 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.1
    CVE-2025-49831

    Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) vulnerable to IAM Authenticator Bypass via Mis-configured Network Device

    An attacker of Secrets Manager, Self-Hosted installations that route traffic from Secrets Manager to AWS through a misconfigured network device can reroute authentication requests to a malicious server under the attacker’s control. CyberArk believes there to …

    cyberark conjur
  • Critical 9.1
    CVE-2025-49827

    Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) Vulnerable to Bypass of IAM Authenticator

    Conjur provides secrets management and application identity for infrastructure. Conjur OSS versions 1.19.5 through 1.22.0 and Secrets Manager, Self-Hosted (formerly known as Conjur Enterprise) 13.1 through 13.5 and 13.6 are vulnerable to bypass of the IAM aut…

    cyberark conjur
  • Critical 9.3
    CVE-2025-22273

    Lack of rate-limiting in password change mechanism in CyberArk Endpoint Privilege Manager

    Application does not limit the number or frequency of user interactions, such as the number of incoming requests. At the "/EPMUI/VfManager.asmx/ChangePassword" endpoint it is possible to perform a brute force attack on the current password in use. This issue …

    cyberark Endpoint Privilege Manager