Product by CyberArk
CyberArk Endpoint Privilege Manager
13 known vulnerabilities in CyberArk Endpoint Privilege Manager (CyberArk), 0 of them actively exploited (CISA KEV).
Key figures
13
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2018-14894 | CyberArk Endpoint Privilege Manager: security vulnerability | 7.8 | |
| Critical | CVE-2018-13052 | CyberArk Endpoint Privilege Manager: Privilege Escalation | 9.8 | |
| Critical | CVE-2025-22273 | Lack of rate-limiting in password change mechanism in CyberArk Endpoint Privilege Manager | — | |
| High | CVE-2025-22270 | Stored XSS in CyberArk Endpoint Privilege Manager | — | |
| High | CVE-2026-2914 | CyberArk Software, a Palo Alto Networks Company Endpoint Privilege Manager Agent: security vulnerability | 7.8 | |
| High | CVE-2025-66374 | CyberArk Endpoint Privilege Manager: Privilege Escalation | 7.8 | |
| Medium | CVE-2025-22271 | IP Spoofing in CyberArk Endpoint Privilege Manager | — | |
| High | CVE-2021-44049 | CyberArk Endpoint Privilege Manager: Privilege Escalation | 7.8 | |
| Medium | CVE-2018-12903 | CyberArk Endpoint Privilege Manager: Cross-Site Scripting (XSS) | 5.4 | |
| High | CVE-2019-9627 | CyberArk Endpoint Privilege Manager: Buffer Overflow | 7.0 | |
| Medium | CVE-2020-25738 | CyberArk Endpoint Privilege Manager: security vulnerability | 5.5 | |
| Low | CVE-2025-22274 | HTML injection in CyberArk Endpoint Privilege Manager | — | |
| Low | CVE-2025-22272 | Self Reflected XSS in CyberArk Endpoint Privilege Manager | — |