Vendor
CyberArk
38 known vulnerabilities in products by CyberArk, 0 of them actively exploited (CISA KEV).
Key figures
38
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
7
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2019-7442 | CyberArk Enterprise Password Vault: XML External Entity (XXE) | 9.8 | |
| Critical | CVE-2018-9843 | CyberArk Password Vault: Code Execution | 9.8 | |
| High | CVE-2025-49828 | CyberArk Conjur: Improper Neutralization of Special Elements Used in a Template Engine | 8.8 | |
| Critical | CVE-2025-49827 | CyberArk Conjur: Reliance on Untrusted Inputs in a Security Decision | 9.8 | |
| Medium | CVE-2018-9842 | CyberArk Password Vault: Information Disclosure | 5.3 | |
| Critical | CVE-2025-49831 | CyberArk Conjur: Improper Authentication | 9.8 | |
| High | CVE-2018-14894 | CyberArk Endpoint Privilege Manager: security vulnerability | 7.8 | |
| Critical | CVE-2018-13052 | CyberArk Endpoint Privilege Manager: Privilege Escalation | 9.8 | |
| High | CVE-2021-31796 | CyberArk Credential Provider: Information Disclosure | 7.5 | |
| Critical | CVE-2020-4062 | Improper Access Control in Conjur OSS Helm Chart | 8.7 | |
| High | CVE-2019-3800 | CF CLI writes the client id and secret to config file | 6.3 | |
| Critical | CVE-2025-22273 | Lack of rate-limiting in password change mechanism in CyberArk Endpoint Privilege Manager | — | |
| High | CVE-2017-11197 | CyberArk Viewfinity: security vulnerability | 7.8 | |
| High | CVE-2025-22270 | Stored XSS in CyberArk Endpoint Privilege Manager | — | |
| High | CVE-2025-49830 | CyberArk Conjur: Path Traversal | 6.5 | |
| Medium | CVE-2022-22700 | CyberArk Identity: security vulnerability | 5.3 | |
| High | CVE-2026-2914 | CyberArk Software, a Palo Alto Networks Company Endpoint Privilege Manager Agent: security vulnerability | 7.8 | |
| High | CVE-2025-66374 | CyberArk Endpoint Privilege Manager: Privilege Escalation | 7.8 | |
| Medium | CVE-2025-49829 | Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) missing validations | 6.5 | |
| Medium | CVE-2021-37151 | CyberArk Identity: security vulnerability | 5.3 | |
| Medium | CVE-2025-22271 | IP Spoofing in CyberArk Endpoint Privilege Manager | — | |
| High | CVE-2024-42340 | CyberArk - CWE-602: Client-Side Enforcement of Server-Side Security | 8.3 | |
| High | CVE-2021-44049 | CyberArk Endpoint Privilege Manager: Privilege Escalation | 7.8 | |
| Medium | CVE-2018-12903 | CyberArk Endpoint Privilege Manager: Cross-Site Scripting (XSS) | 5.4 | |
| High | CVE-2019-9627 | CyberArk Endpoint Privilege Manager: Buffer Overflow | 7.0 |