CyberRota Analysis
This vulnerability has an unknown severity rating. See the original NVD description below for full technical details.
CVE
CVE-2025-22271
Severity
UNKNOWN
CVSS
N/A
EPSS
0.41%
Original NVD Description
The application or its infrastructure allows for IP address spoofing by providing its own value in the "X-Forwarded-For" header. Thus, the action logging mechanism in the application loses accountability This issue affects CyberArk Endpoint Privilege Manager in SaaS version 24.7.1. The status of other versions is unknown. After multiple attempts to contact the vendor we did not receive any answer.