Skip to content
Zohocorp Password Manager Pro vulnerabilities
-
zohocorp manageengine pam360, manageengine access manager plus, manageengine password manager pro +2 more
Broken Access Control
CVE-2025-11669
8.1 High
-
manageengine pam360, password manager pro, zohocorp manageengine pam360 +1 more +3 more
SQL Injection
CVE-2024-5546
8.3 High
-
manageengine access manager plus, asset explorer, service desk plus +39 more +41 more
ManageEngine Information Disclosure in Multiple Products
CVE-2023-6105
5.5 Medium
-
zohocorp manageengine password manager pro
Cross Site Scripting (XSS) vulnerability in Query Report feature in Zoho ManageEngine Password...
CVE-2020-27449
6.1 Medium
-
zohocorp manageengine access manager plus, manageengine pam360, manageengine password manager pro +2 more
Static credentials exist in the PostgreSQL data used in ManageEngine Access Manager Plus (AMP)...
CVE-2023-2291
7.8 High
-
zoho manageengine, zohocorp manageengine access manager plus, manageengine ad360 +20 more +22 more
Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow...
CVE-2022-47966
In KEVPublic exploit
EPSS 99.8%
9.8 Critical
-
zohocorp manageengine access manager plus, manageengine pam360, manageengine password manager pro +2 more
Zoho ManageEngine Access Manager Plus before 4309, Password Manager Pro before 12210, and PAM360...
CVE-2022-47523
EPSS 70.6%
9.8 Critical
-
zohocorp manageengine password manager pro, manageengine access manager plus, manageengine pam360 +2 more
Zoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus...
CVE-2022-43672
EPSS 67.6%
9.8 Critical
-
zohocorp manageengine password manager pro, manageengine access manager plus, manageengine pam360 +2 more
Zoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus...
CVE-2022-43671
EPSS 75.2%
9.8 Critical
-
zohocorp manageengine password manager pro, manageengine access manager plus, manageengine pam360 +2 more
Zoho ManageEngine Password Manager Pro through 12120 before 12121, PAM360 through 5550 before...
CVE-2022-40300
EPSS 99.1%
9.8 Critical
-
zoho manageengine, zohocorp manageengine access manager plus, manageengine password manager pro +1 more +3 more
Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to...
CVE-2022-35405
In KEVPublic exploit
EPSS 99.9%
9.8 Critical
-
zohocorp manageengine access manager plus, manageengine pam360, manageengine password manager pro +2 more
Zoho ManageEngine Access Manager Plus before 4302, Password Manager Pro before 12007, and PAM360...
CVE-2022-29081
EPSS 83.5%
9.8 Critical
-
zohocorp manageengine password manager pro
Zoho ManageEngine Password Manager Pro before 11.2 11200 allows login/AjaxResponse.jsp...
CVE-2021-33617
5.3 Medium
-
zohocorp manageengine password manager pro
In Zoho ManageEngine Password Manager Pro before 11.1 build 11104, attackers are able to retrieve...
CVE-2021-31857
5.9 Medium
-
zohocorp manageengine password manager pro
Zoho ManageEngine Password Manager Pro through 10.x has a CSV Excel Macro Injection vulnerability...
CVE-2020-9347
Disputed
9.8 Critical
-
zohocorp manageengine password manager pro
Zoho ManageEngine Password Manager Pro 10.4 and prior has no protection against Cross-site...
CVE-2020-9346
8.8 High
-
zoho password manager pro (pmp), zohocorp manageengine password manager pro +1 more
In ZOHO Password Manager Pro (PMP) 8.3.0 (Build 8303) and 8.4.0 (Build 8400,8401,8402),...
CVE-2016-1159
6.5 Medium
-
zohocorp manageengine analytics plus, manageengine browser security plus, manageengine desktop central +15 more +17 more
Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper...
CVE-2019-12133
7.8 High
-
zohocorp manageengine password manager pro
Zoho ManageEngine Password Manager Pro 9 before 9.4 (9400) has reflected XSS in SearchResult.ec...
CVE-2017-17698
6.1 Medium
-
zohocorp password manager pro
Cross-site request forgery (CSRF) vulnerability in ManageEngine Password Manager Pro before 8.5 ...
CVE-2016-1161
8.0 High
-
zohocorp manageengine password manager pro
SQL injection vulnerability in the AdvanceSearch.class in AdventNetPassTrix.jar in ManageEngine...
CVE-2015-5459
6.5 Medium
-
zohocorp manageengine password manager pro, manageengine it360 +1 more
SQL injection vulnerability in the MetadataServlet servlet in ManageEngine Password Manager Pro ...
CVE-2014-3997
Public exploit
EPSS 13.1%
7.5 High
-
zohocorp manageengine password manager pro
SQL injection vulnerability in BulkEditSearchResult.cc in ManageEngine Password Manager Pro (PMP)...
CVE-2014-8498
Public exploit
EPSS 12.7%
6.5 Medium