Brute Force Attack on Current Password Possible in CyberArk Endpoint Privilege Manager SaaS Version 24.7.1
CVE-2025-22273

9.3CRITICAL

Key Information:

Vendor

Cyberark

Status
Endpoint Privilege Manager
Vendor
CVE Published:
28 February 2025

What is CVE-2025-22273?

false

Affected Version(s)

Endpoint Privilege Manager SaaS 24.7.1

References

https://cert.pl/en/posts/2025/02/CVE-2025-22270/
third-party-advisory
https://cert.pl/posts/2025/02/CVE-2025-22270/
third-party-advisory
https://docs.cyberark.com/epm/24.7.1/en/content/resources...
product

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Karol Mazurek (Afine Team)
Maksymilian Kubiak (Afine Team)
.