CVE-2018-14894

HIGH 7.8CVE-2018-14894 · Published 09/04/2019 · updated 17/06/2026

In short

CVE-2018-14894 is a HIGH (CVSS 7.8) vulnerability affecting endpoint privilege manager (cyberark).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 80.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
endpoint privilege manager cyberark	`≤ 10.2.1.603`	No fix yet

Description

CyberArk Endpoint Privilege Manager 10.2.1.603 and earlier allows an attacker (who is able to edit permissions of a file) to bypass intended access restrictions and execute blocked applications.

References

packetstormsecurity.com/files/152489/CyberArk-EPM-10.2.1.603-Security-Restrictions-Bypass.html · Exploit
mustafakemalcan.com/cyberark-epm-file-block-bypass-cve-2018-14894 · Exploit
exploit-db.com/exploits/46688 · Exploit
youtube.com/watch · Exploit

More vulnerabilities in endpoint privilege manager

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

endpoint privilege manager

cyberark

≤ 10.2.1.603

No fix yet

More vulnerabilities in endpoint privilege manager

See all →