← Vulnerability feed

Vulnerability record · CVE-2018-14894 · published 9 April 2019

CVE-2018-14894: Cyberark endpoint privilege manager improper privilege management vulnerability

Cyberark · Endpoint Privilege Manager

CyberArk Endpoint Privilege Manager 10.2.1.603 and earlier allows an attacker (who is able to edit permissions of a file) to bypass intended access restrictions and execute blocked applications.

7.8 CVSS 3.0 High EPSS 1.9% · top 20.9% CWE-269 · Improper privilege management
7.8CVSS 3.0 base score, v2 4.6
1.9%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References, 8 tagged exploit
17 Jun 2026Last modified by NVD

Description

CyberArk Endpoint Privilege Manager 10.2.1.603 and earlier allows an attacker (who is able to edit permissions of a file) to bypass intended access restrictions and execute blocked applications.

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://packetstormsecurity.com/files/152489/CyberArk-EPM-10.2.1.603-Security-Restrictions-Bypass.html ExploitThird Party AdvisoryVDB Entry
https://mustafakemalcan.com/cyberark-epm-file-block-bypass-cve-2018-14894/ ExploitThird Party Advisory
https://www.exploit-db.com/exploits/46688/ ExploitThird Party AdvisoryVDB Entry
https://www.youtube.com/watch?v=B0VpK0poTco ExploitThird Party Advisory
http://packetstormsecurity.com/files/152489/CyberArk-EPM-10.2.1.603-Security-Restrictions-Bypass.html ExploitThird Party AdvisoryVDB Entry
https://mustafakemalcan.com/cyberark-epm-file-block-bypass-cve-2018-14894/ ExploitThird Party Advisory
https://www.exploit-db.com/exploits/46688/ ExploitThird Party AdvisoryVDB Entry
https://www.youtube.com/watch?v=B0VpK0poTco ExploitThird Party Advisory

Track CVE-2018-14894 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2018-13052Cyberark endpoint privilege manager vulnerabilityIn CyberArk Endpoint Privilege Manager (formerly Viewfinity), Privilege Escalation is possible if the attacker has one process that executes as Admin.EPSS 1.2%8.5CVE-2026-2914Cyberark endpoint privilege manager improper privilege management vulnerabilityCyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized privilege elevation leveraging CyberArk elevation d…EPSS 0.17%7.8CVE-2025-66374Cyberark endpoint privilege manager improper privilege management vulnerabilityCyberArk Endpoint Privilege Manager Agent through 25.10.0 allows a local user to achieve privilege escalation through policy elevation of an Administ…EPSS 0.24%7.8CVE-2021-44049Cyberark endpoint privilege manager exposure of resource to wrong sphere vulnerabilityCyberArk Endpoint Privilege Manager (EPM) through 11.5.3.328 before 2021-12-20 allows a local user to gain elevated privileges via a Trojan horse Pro…EPSS 0.40%7.0CVE-2019-9627Cyberark endpoint privilege manager out-of-bounds write vulnerabilityA buffer overflow in the kernel driver CybKernelTracker.sys in CyberArk Endpoint Privilege Manager versions prior to 10.7 allows an attacker (without…EPSS 0.41%5.5CVE-2020-25738Cyberark endpoint privilege manager uncontrolled search path element vulnerabilityCyberArk Endpoint Privilege Manager (EPM) 11.1.0.173 allows attackers to bypass a Credential Theft protection mechanism by injecting a DLL into a pro…EPSS 0.44%5.4CVE-2018-12903Cyberark endpoint privilege manager cross-site scripting vulnerabilityIn CyberArk Endpoint Privilege Manager (formerly Viewfinity) 10.2.1.603, there is persistent XSS via an account name on the create token screen, the …EPSS 0.64%9.9CVE-2026-84869ScreenConnect client allows unauthorized file transfer and execution in remote sessionsA flaw in the ConnectWise ScreenConnect client lets files be transferred and executed inside an active remote session without authorization or Host c…KEVEPSS 0.92%analysed

Source: NIST National Vulnerability Database (record CVE-2018-14894), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.