CVEvulnerability

CVE-2025-13762

4.8 MEDIUM Published 2025-11-27 Modified 2026-10-18 Official page ↗

Status: Deferred
Published: 2025-11-27
Last modified: 2026-10-18
Assigner: [email protected]
CVSS 4.0 ([email protected]): 4.8 MEDIUM — CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:X/U:X
Weaknesses: CWE-20

Description

Improper Input Validation vulnerability in CyberArk CyberArk Secure Web Sessions Extension on Chrome, Edge allows Denial of Service when trying to starting new SWS sessions.This issue affects CyberArk Secure Web Sessions Extension: before 2.2.30305.

Weakness · CWE (1)

CWE-20 Improper Input Validation weakness

References

https://chromewebstore.google.com/detail/cyberark-secure-web-sessi/ohfinlfcbaehgokpmkjcmkgdcbgamgln?hl=en chromewebstore.google.com
https://microsoftedge.microsoft.com/addons/detail/cyberark-secure-web-sessi/gmfjibhpaliafbemoifjjdkmgaknhohb?hl=en-US microsoftedge.microsoft.com

CVE-2025-13762

Description

Related

Weakness · CWE (1)

References