Skip to content
OpenAdvisories

Vendor

cyberark

20 known vulnerabilities.

Products

conjur 5 Endpoint Privilege Manager 5 CyberArk Identity Management 4 Privileged Access Manager 2 CyberArk Secure Web Sessions Extension 1 Identity 1 IDP 1 Conjur OSS Helm Chart 1
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 4.8
    CVE-2025-13762

    Client-Side Denial of Service Condition in SWS Extension prior to version 2.2.30305

    Improper Input Validation vulnerability in CyberArk CyberArk Secure Web Sessions Extension on Chrome, Edge allows Denial of Service when trying to starting new SWS sessions.This issue affects CyberArk Secure Web Sessions Extension: before 2.2.30305.

    cyberark CyberArk Secure Web Sessions Extension
  • Medium 5.3
    CVE-2025-46382

    CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

    cyberark IDP
  • Medium 6.0
    CVE-2025-49829

    Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) missing validations

    Conjur provides secrets management and application identity for infrastructure. Missing validations in Secrets Manager, Self-Hosted allows authenticated attackers to inject resources into the database and to bypass permission checks. This issue affects Secret…

    cyberark conjur
  • Medium 6.9
    CVE-2025-22271

    IP Spoofing in CyberArk Endpoint Privilege Manager

    The application or its infrastructure allows for IP address spoofing by providing its own value in the "X-Forwarded-For" header. Thus, the action logging mechanism in the application loses accountability This issue affects CyberArk Endpoint Privilege Manager …

    cyberark Endpoint Privilege Manager
  • Medium 4.2
    CVE-2024-57967

    PVWA (Password Vault Web Access) in CyberArk Privileged Access Manager Self-Hosted before 14.4 has potentially elevated…

    cyberark Privileged Access Manager
  • Medium 4.2
    CVE-2024-54840

    PVWA (Password Vault Web Access) in CyberArk Privileged Access Manager Self-Hosted before 14.4 does not properly addres…

    cyberark Privileged Access Manager
  • Medium 4.3
    CVE-2024-42339

    CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

    CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

    cyberark CyberArk Identity Management
  • Medium 4.3
    CVE-2024-42338

    CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

    CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

    cyberark CyberArk Identity Management
  • Medium 4.3
    CVE-2024-42337

    CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

    CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

    cyberark CyberArk Identity Management