Skip to content
OpenAdvisories

Product · cyberark

Endpoint Privilege Manager

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2025-22273

    Lack of rate-limiting in password change mechanism in CyberArk Endpoint Privilege Manager

    Application does not limit the number or frequency of user interactions, such as the number of incoming requests. At the "/EPMUI/VfManager.asmx/ChangePassword" endpoint it is possible to perform a brute force attack on the current password in use. This issue …

    cyberark Endpoint Privilege Manager