How severe is CVE-2025-22274?

This vulnerability has a severity rating of LOW with a CVSS score of N/A out of 10.

What type of vulnerability is CVE-2025-22274?

This is classified as CWE-80, which is a common weakness in software security.

CVE-2025-22274 - LOW Severity | CVSS N/A

Vulnerability Description

It is possible to inject HTML code into the page content using the "content" field in the "Application definition" page. This issue affects CyberArk Endpoint Privilege Manager in SaaS version 24.7.1. The status of other versions is unknown. After multiple attempts to contact the vendor we did not receive any answer.

Related Vulnerabilities

CVE-2023-39216

CRITICAL

CVSS:9.8(Critical)

Improper input validation in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access.

CWE-802023

CVE-2019-13923

CRITICAL

CVSS:9.6(Critical)

A vulnerability has been identified in IE/WSN-PA Link WirelessHART Gateway (All versions). The integrated configuration web server of the affected device could allow Cross-Site Scripting (XSS) attacks...

CWE-802019

CVE-2020-13562

CRITICAL

CVSS:9.6(Critical)

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP request can lead to arbitrary JavaScript execution. An attacker can provide a craft...

CWE-802020

CVE-2020-13563

CRITICAL

CVSS:9.6(Critical)

CWE-802020

CVE-2020-13564

CRITICAL

CVSS:9.6(Critical)

CWE-802020

CVE-2024-39363

CRITICAL

CVSS:9.6(Critical)

A cross-site scripting (xss) vulnerability exists in the login.cgi set_lang_CountryCode() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a disclosure ...

CWE-802024