CVE-2025-13762CWE-20

CVE-2025-13762

published November 27, 2025

CVSS
4.8
EPSS
0%
Percentile
3.2
In the wild
Unconfirmed
What it is

Improper Input Validation vulnerability in CyberArk CyberArk Secure Web Sessions Extension on Chrome, Edge allows Denial of Service when trying to starting new SWS sessions.This issue affects CyberArk Secure Web Sessions Extension: before 2.2.30305.

The record
Technical detail
CVSS
4.8 · NONE
CVSS v4.0
Not supplied
EPSS
0.00142 · 3.2th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2025-11-27T08:15Z
References (2)
https://chromewebstore.google.com/detail/cyberark-secure-web-sessi/ohfinlfcbaehgokpmkjcmkgdcbgamgln?hl=en · [email protected]https://microsoftedge.microsoft.com/addons/detail/cyberark-secure-web-sessi/gmfjibhpaliafbemoifjjdkmgaknhohb?hl=en-US · [email protected]
EPSS history
Timeline
  • 27 NOV 02:50Z
    Client-Side Denial of Service Condition in SWS Extension prior to version 2.2.30305
    cvelistv5