Skip to content
OpenAdvisories
Medium · 4.8 CVE-2025-13762 EUVD-2025-199782GHSA-5mpf-fq9j-7qf9

Client-Side Denial of Service Condition in SWS Extension prior to version 2.2.30305

Published Nov 27, 2025 · Updated Dec 3, 2025 · Assigned by GovTech CSG

Vendor: cyberark Product: CyberArk Secure Web Sessions Extension

Description

Improper Input Validation vulnerability in CyberArk CyberArk Secure Web Sessions Extension on Chrome, Edge allows Denial of Service when trying to starting new SWS sessions.This issue affects CyberArk Secure Web Sessions Extension: before 2.2.30305.

Affected products

VendorProductAffectedFixed
CyberArk CyberArk Secure Web Sessions Extension < 2.2.30305 2.2.30305

References