Search vulnerabilities

Results 1

Export CSV
CVE-2019-7442

An XML external entity (XXE) vulnerability in the Password Vault Web Access (PVWA) of CyberArk Enterprise Password Vault <=10.7 allows remote attackers to read arbitrary files or potentially bypass authentication via a crafted DTD in the SAML authentication system.

CVSS 3.0 · 9.8 Critical EPSS 40.0% KEV · Not listed
Vendors