How many CyberArk Secrets Manager, Self-Hosted CVEs are in CISA KEV?

None of CyberArk Secrets Manager, Self-Hosted's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

What are the most common weakness types in CyberArk Secrets Manager, Self-Hosted CVEs?

CyberArk Secrets Manager, Self-Hosted's CVEs most often map to these CWE weakness types: CWE-1336 (Improper Neutralization of Special Elements Used in a Template Engine), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-807 (Reliance on Untrusted Inputs in a Security Decision).

What is the average severity of CyberArk Secrets Manager, Self-Hosted CVEs?

The average CVSS base score across CyberArk Secrets Manager, Self-Hosted's scored CVEs is 8.3.

RadicalNotion.AI

Log in Start free

CyberArk

3 CVEs

CyberArk Secrets Manager, Self-Hosted Vulnerabilities

Name: CyberArk Secrets Manager, Self-Hosted vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Secrets Manager, Self-Hosted by CyberArk.

3

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

8.3

Avg CVSS

2025–2025

Last updated July 15, 2025

Overview

CyberArk Secrets Manager, Self-Hosted has 3 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 8.3.

This page aggregates every publicly disclosed vulnerability (CVE) affecting CyberArk Secrets Manager, Self-Hosted, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of CyberArk Secrets Manager, Self-Hosted's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High2

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of CyberArk Secrets Manager, Self-Hosted's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No CyberArk Secrets Manager, Self-Hosted CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every CyberArk Secrets Manager, Self-Hosted version named in a CVE, then pick one to see only the CVEs that affect it.

No specific affected versions are recorded for CyberArk Secrets Manager, Self-Hosted; the CVEs below apply to the product without a version pin.

3 CVEs

Sort

Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) vulnerable to path traversal and file disclosure
CVE-2025-49830
Patch
CWE-22
High · CVSS 7.1
EPSS 0.5% (42th pct)2025-07-15
Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) Vulnerable to Remote Code Execution
CVE-2025-49828
Patch
CWE-1336
High · CVSS 8.6
EPSS 2.0% (79th pct)2025-07-15
Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) Vulnerable to Bypass of IAM Authenticator
CVE-2025-49827
Patch
CWE-807
Critical · CVSS 9.1
EPSS 1.4% (71th pct)2025-07-15

Common weakness types

The CWE weakness categories most often found in CyberArk Secrets Manager, Self-Hosted CVEs. Follow any weakness for its full explanation.

Other CyberArk products

Browse vulnerabilities for other products by CyberArk.

endpoint privilege manager13 CVEs identity6 CVEs conjur5 CVEs CyberArk Identity Management4 CVEs credential provider3 CVEs Idira Endpoint Privilege Manager3 CVEs conjur OSS2 CVEs password vault2 CVEs

All CyberArk vulnerabilities

Frequently asked questions

Common questions about CyberArk Secrets Manager, Self-Hosted vulnerabilities.

How many CVEs does CyberArk Secrets Manager, Self-Hosted have?: CyberArk Secrets Manager, Self-Hosted has 3 published CVE records since 2025.
How many CyberArk Secrets Manager, Self-Hosted CVEs are in CISA KEV?: None of CyberArk Secrets Manager, Self-Hosted's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for CyberArk Secrets Manager, Self-Hosted vulnerabilities?: No CyberArk Secrets Manager, Self-Hosted CVEs currently have a tracked public exploit in this dataset.
What are the most common weakness types in CyberArk Secrets Manager, Self-Hosted CVEs?: CyberArk Secrets Manager, Self-Hosted's CVEs most often map to these CWE weakness types: CWE-1336 (Improper Neutralization of Special Elements Used in a Template Engine), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-807 (Reliance on Untrusted Inputs in a Security Decision).
How many critical CyberArk Secrets Manager, Self-Hosted vulnerabilities are there?: CyberArk Secrets Manager, Self-Hosted has 1 critical and 2 high-severity CVEs.
What is the average severity of CyberArk Secrets Manager, Self-Hosted CVEs?: The average CVSS base score across CyberArk Secrets Manager, Self-Hosted's scored CVEs is 8.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track CyberArk Secrets Manager, Self-Hosted vulnerabilities

Monitor new CyberArk Secrets Manager, Self-Hosted vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing