Medium severity · published Nov 27, 2025
CVE-2025-13762
Client-Side Denial of Service Condition in SWS Extension prior to version 2.2.30305
4.8
CVSS
0.1%
EPSS
No
On KEV
Description
Improper Input Validation vulnerability in CyberArk CyberArk Secure Web Sessions Extension on Chrome, Edge allows Denial of Service when trying to starting new SWS sessions.This issue affects CyberArk Secure Web Sessions Extension: before 2.2.30305.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 3% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
CyberArk Secure Web Sessions Extension · CyberArk
before 2.2.30305 · source: vendor
Affected product
CS
CyberArk Secure Web Sessions Extension
CyberArk
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-13762
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-13762
chromewebstore.google.com
https://chromewebstore.google.com/detail/cyberark-secure-web-sessi/ohfinlfcbaehgokpmkjcmkgdcbgamgln?hl=en
microsoftedge.microsoft.com
https://microsoftedge.microsoft.com/addons/detail/cyberark-secure-web-sessi/gmfjibhpaliafbemoifjjdkmgaknhohb?hl=en-US