Skip to content
OpenAdvisories

Vendor

cyberark

20 known vulnerabilities.

Products

conjur 5 Endpoint Privilege Manager 5 CyberArk Identity Management 4 Privileged Access Manager 2 CyberArk Secure Web Sessions Extension 1 Identity 1 IDP 1 Conjur OSS Helm Chart 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.0
    CVE-2025-22274

    HTML injection in CyberArk Endpoint Privilege Manager

    It is possible to inject HTML code into the page content using the "content" field in the "Application definition" page. This issue affects CyberArk Endpoint Privilege Manager in SaaS version 24.7.1. The status of other versions is unknown. After multiple att…

    cyberark Endpoint Privilege Manager
  • Low 2.1
    CVE-2025-22272

    Self Reflected XSS in CyberArk Endpoint Privilege Manager

    In the "/EPMUI/ModalDlgHandler.ashx?value=showReadonlyDlg" endpoint, it is possible to inject code in the "modalDlgMsgInternal" parameter via POST, which is then executed in the browser. The risk of exploiting vulnerability is reduced due to the required addi…

    cyberark Endpoint Privilege Manager