Endpoint Privilege Manager vulnerabilities
4 known vulnerabilities in Endpoint Privilege Manager from CyberArk. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.8 High severity
Endpoint Privilege Manager Agent: Improper Privilege Management
CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized privilege elevation leveraging CyberArk elevation dialogs
- 7.8 High severity
Endpoint Privilege Manager: Improper Privilege Management
CyberArk Endpoint Privilege Manager Agent through 25.10.0 allows a local user to achieve privilege escalation through policy elevation of an Administration task.
- 9.3 Critical severity
Endpoint Privilege Manager: Allocation of Resources Without Limits or Throttling
Application does not limit the number or frequency of user interactions, such as the number of incoming requests. At the "/EPMUI/VfManager.asmx/ChangePassword" endpoint it is possible to perform a brute force attack on the current password in use. This issue a
- 7.3 High severity
Endpoint Privilege Manager: Improper Neutralization of Input During Web Page Generation
An attacker with access to the Administration panel, specifically the "Role Management" tab, can inject code by adding a new role in the "name" field. It should be noted, however, that the risk of exploiting vulnerability is reduced due to the required additio