← Database

CVE-2024-54840

MEDIUM CVSS: 4.2 Published: 2025-02-03 Modified: 2026-06-17

Description

PVWA (Password Vault Web Access) in CyberArk Privileged Access Manager Self-Hosted before 14.4 does not properly address environment issues that can contribute to Host header injection.

Affected Platforms

Cyberark Privileged Access Manager

Weakness Type

CWE-348, NVD-CWE-Other

References