| Package | Affected versions | Patched versions |
|---|---|---|
| enterprise password vault | ≤ 10.7 |
An XML external entity (XXE) vulnerability in the Password Vault Web Access (PVWA) of CyberArk Enterprise Password Vault <=10.7 allows remote attackers to read arbitrary files or potentially bypass authentication via a crafted DTD in the SAML authentication system.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free