Read the docs

CyberArk

Records38All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high12CVSS 7.0–8.9

Exploited now

CyberArk records in CISA KEV

No CyberArk vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Endpoint Privilege Manager 8 records MEDIUM Identity 6 records LOW Conjur 5 records MEDIUM Credential Provider 3 records LOW Password Vault 2 records MEDIUM Conjur Oss Helm Chart 1 record MEDIUM Conjur Service Broker 1 record LOW Enterprise Password Vault 1 record HIGH

Records

5 records in Conjur · all components

TI-2025-31746 CVE-2025-49831

Improper authentication in CyberArk conjur

Priority MEDIUM 44

An attacker of Secrets Manager, Self-Hosted installations that route traffic from Secrets Manager to AWS through a misconfigured network device can reroute authentication requests to a malicious server under the attacker…

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.01193 Published 2025-07-15 No fix listed CWE-287
TI-2025-31745 CVE-2025-49830

Path traversal in CyberArk conjur

Priority LOW 32

Conjur provides secrets management and application identity for infrastructure.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00614 Published 2025-07-15 No fix listed CWE-22
Open these records in search →