Advisories · Technology

cyberark conjur.

Every CVE that names cyberark conjur among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-49831 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) vulnerable to IAM Authenticator Bypass via Mis-configured Network Device
- cyberark conjur
- Authentication bypass
Not analysed yet 15 Jul 2025
CVE-2025-49830 CVE record

CVSS 7.1 High

Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) vulnerable to path traversal and file disclosure
- cyberark conjur
- Path traversal
Not analysed yet 15 Jul 2025
CVE-2025-49829 CVE record

CVSS 6.0 Medium

Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) missing validations
- cyberark conjur
- Broken access control
Not analysed yet 15 Jul 2025
CVE-2025-49828 CVE record

CVSS 8.6 High

Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) Vulnerable to Remote Code Execution
- cyberark conjur
- Code injection
Not analysed yet 15 Jul 2025
CVE-2025-49827 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) Vulnerable to Bypass of IAM Authenticator
- cyberark conjur
- CWE-807
Not analysed yet 15 Jul 2025