GCVE - cpe:2.3:a:manageengine:password_manager_pro:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:manageengine:password_manager_pro:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Manageengine (`b7eba64e-d5d7-5395-be8c-84fe138ee37e`)
Product	Password Manager Pro (`8a41c1a8-ddf7-594a-b5f8-0beb73eb7232`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-5546`	vulnerable	2026-06-03 14:57:53.091840	SQL Injection HIGH (8.3) Zohocorp ManageEngine Password Manager Pro versions before 12431 and ManageEngine PAM360 versions before 7001 are affected by authenticated SQL Injection vulnerability via a global search option. Published: 2024-08-28T08:44:09.433Z Updated: 2024-08-28T13:27:52.940Z Open on db.gcve.eu Reference links https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2024-5546.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-9372`	vulnerable	2026-06-03 14:34:26.732621	Details available Directory traversal vulnerability in the UploadAccountActivities servlet in ManageEngine Password Manager Pro (PMP) before 7103 allows remote attackers to delete arbitrary files via a .. (dot dot) in a filename. Published: 2014-12-16T18:00:00.000Z Updated: 2024-08-06T13:40:25.163Z Open on db.gcve.eu Reference links http://www.zerodayinitiative.com/advisories/ZDI-14-421/ http://www.manageengine.com/products/passwordmanagerpro/release-notes.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-4387`	vulnerable	2026-06-03 14:29:57.538496	Details available The cross-site scripting (XSS) protection mechanism in ShowInContentAreaAction.do in ManageEngine Password Manager Pro (PMP) before 6.1 Build 6104 uses case-sensitive checks for malicious inputs, which allows remote attackers to inject arbitrary web script or HTML via the searchtext parameter and other unspecified inputs. Published: 2009-12-22T23:00:00.000Z Updated: 2024-09-16T17:29:04.222Z Open on db.gcve.eu Reference links http://www.scip.ch/?vuldb.4063 http://www.scip.ch/publikationen/advisories/scip_advisory-4063_manageengine_pmp_script_injection.txt http://forums.manageengine.com/#Topic/49000003740390 http://www.manageengine.com/products/passwordmanagerpro/release-notes.html http://secunia.com/advisories/37765	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.