Back to Database
Status published
Medium
CVE-2025-13762
Client-Side Denial of Service Condition in SWS Extension prior to version 2.2.30305
Vulnerability Description
Improper Input Validation vulnerability in CyberArk CyberArk Secure Web Sessions Extension on Chrome, Edge allows Denial of Service when trying to starting new SWS sessions.This issue affects CyberArk Secure Web Sessions Extension: before 2.2.30305.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-13762
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Benjamen Lim
- Goh Jing Loon
- Sean Seah
- Tan Inn Fung
- Zhang Bosen
References
More from CyberArk
View All →CVE-2025-46382
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor...
Medium
5.3
CVE-2025-22274
HTML injection in CyberArk Endpoint Privilege Manager
Low
2
CVE-2025-22273
Lack of rate-limiting in password change mechanism in CyberArk Endpoint Privilege Manager
Critical
9.3
CVE-2025-22272
Self Reflected XSS in CyberArk Endpoint Privilege Manager
Low
2.1
CVE-2025-22271
IP Spoofing in CyberArk Endpoint Privilege Manager
Medium
6.9
Affected Vendor
CyberArk
View all reports →Affected Software
CyberArk Secure Web Sessions Extension
Vulnerable Versions:
0
Timeline
Official Publish:
November 27th, 2025
Last Modified:
December 3rd, 2025
Added to House:
July 22nd, 2026