28Şub
CVE-2025-22272 | CyberArk Endpoint Privilege Manager 24.7.1 ModalDlgHandler.ashx?value=showReadonlyDlg modalDlgMsgInternal cross site scripting
A vulnerability has been found in CyberArk Endpoint Privilege Manager 24.7.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /EPMUI/ModalDlgHandler.ashx?value=showReadonlyDlg. The manipulation of the argument modalDlgMsgInternal leads to cross site scripting. This vulnerability is known as CVE-2025-22272. The attack can be launched remotely. There is no exploit available.