PT-2025-48223

CVE-2025-13762

Published

2025-11-27

Updated

2026-09-03

Description by

CVSS 4.0

4.8

Medium

MetricsAV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions CyberArk Secure Web Sessions Extension versions prior to 2.2.30305

Description A flaw exists in CyberArk Secure Web Sessions Extension on Chrome and Edge that could lead to a denial of service when initiating new Secure Web Sessions (SWS) sessions. The issue is due to improper input validation.

Recommendations Update CyberArk Secure Web Sessions Extension to version 2.2.30305 or later.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration