CVE-2025-22274 - CVE House
Back to Database
Status published Low CVE-2025-22274

HTML injection in CyberArk Endpoint Privilege Manager

Vulnerability Description

It is possible to inject HTML code into the page content using the "content" field in the "Application definition" page. This issue affects CyberArk Endpoint Privilege Manager in SaaS version 24.7.1. The status of other versions is unknown. After multiple attempts to contact the vendor we did not receive any answer.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-22274

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Karol Mazurek (Afine Team)
  • Maksymilian Kubiak (Afine Team)

References

More from CyberArk

View All →
CVE-2025-46382
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor...
Medium 5.3
CVE-2025-22273
Lack of rate-limiting in password change mechanism in CyberArk Endpoint Privilege Manager
Critical 9.3
CVE-2025-22272
Self Reflected XSS in CyberArk Endpoint Privilege Manager
Low 2.1
CVE-2025-22271
IP Spoofing in CyberArk Endpoint Privilege Manager
Medium 6.9
CVE-2025-22270
Stored XSS in CyberArk Endpoint Privilege Manager
High 7.3

Affected Vendor

Affected Software

Endpoint Privilege Manager
Vulnerable Versions:
24.7.1

Timeline

Official Publish: February 28th, 2025
Last Modified: March 12th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-80

MITRE ATT&CK TTPs

T1189 Drive-by Compromise
Initial Access
T1059 Command and Scripting Interpreter
Execution
T1552 Unsecured Credentials
Credential Access
T1071 Application Layer Protocol
Command and Control
T1565 Data Manipulation
Impact