Cyberark Identity — known CVE vulnerabilities

Every CVE whose affected-product data names Cyberark Identity, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2024-42340 — CVSS 8.3 (high): CyberArk - CWE-602: Client-Side Enforcement of Server-Side Security
• CVE-2021-37151 — CVSS 5.3 (medium): CyberArk Identity 21.5.131, when handling an invalid authentication attempt, sometimes reveals whether the username is valid. In certain…
• CVE-2022-22700 — CVSS 5.3 (medium): CyberArk Identity versions up to and including 22.1 in the 'StartAuthentication' resource, exposes the response header 'X-CFY-TX-TM'. In…
• CVE-2024-42337 — CVSS 4.3 (medium): CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
• CVE-2024-42338 — CVSS 4.3 (medium): CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
• CVE-2024-42339 — CVSS 4.3 (medium): CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor