What’s Vulnerable › Products
CyberArk Endpoint Privilege Manager vulnerabilities
13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.
Check whether your CyberArk Endpoint Privilege Manager version is affected
Latest CyberArk Endpoint Privilege Manager vulnerabilities
- CVE-2026-2914 — (CVSS 7.8)
- CVE-2025-66374 — (CVSS 7.8)
- CVE-2025-22274 — HTML injection in CyberArk Endpoint Privilege Manager (CVSS 2.0)
- CVE-2025-22273 — Lack of rate-limiting in password change mechanism in CyberArk Endpoint Privilege Manager (CVSS 9.3)
- CVE-2025-22272 — Self Reflected XSS in CyberArk Endpoint Privilege Manager (CVSS 2.1)
- CVE-2025-22271 — IP Spoofing in CyberArk Endpoint Privilege Manager (CVSS 6.9)
- CVE-2025-22270 — Stored XSS in CyberArk Endpoint Privilege Manager (CVSS 7.3)
- CVE-2021-44049 — (CVSS 7.8)
- CVE-2020-25738 — (CVSS 5.5)
- CVE-2018-14894 — (CVSS 7.8)
- CVE-2019-9627 — (CVSS 7.0)
- CVE-2018-13052 — (CVSS 9.8)
- CVE-2018-12903 — (CVSS 5.4)