Approved changes feed: RSS · Atom

cpe:2.3:a:zohocorp:manageengine_password_manager_pro:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorZohocorp (4f1ab088-ab0e-54ac-b0dc-2304879a7502)
ProductManageengine Password Manager Pro (3bc1e2cc-f2eb-500e-95b3-eb5f44d90392)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-12263 vulnerable 2026-09-16 04:32:51.291076 Authentication Bypass
HIGH (8.8)
Zohocorp ManageEngine Password Manager Pro versions before 13232 and PAM360 versions before 8551 are vulnerable to an authentication bypass vulnerability due to improper SAML validation.
Published: 2026-08-13T10:18:35.174Z
Updated: 2026-08-13T14:41:57.134Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11840 vulnerable 2026-09-16 04:32:46.043734 SQL Injection
HIGH (8.8)
Zohocorp ManageEngine Password Manager Pro versions before 13232 and ManageEngine PAM360 versions before 8552 are vulnerable to authenticated SQL injection.
Published: 2026-08-13T07:35:28.105Z
Updated: 2026-08-13T14:16:05.622Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5785 vulnerable 2026-06-08 08:07:04.091146 SQL Injection
HIGH (8.1)
Zohocorp ManageEngine PAM360 versions before 8531 and ManageEngine Password Manager Pro versions from 8600 to 13230 are vulnerable to Authenticated SQL injection in the query report module.
Published: 2026-04-16T13:46:28.313Z
Updated: 2026-04-17T03:55:15.059Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11669 vulnerable 2026-06-08 07:04:28.729957 Broken Access Control
HIGH (8.1)
Zohocorp ManageEngine PAM360 versions before 8202; Password Manager Pro versions before 13221; Access Manager Plus versions prior to 4401 are vulnerable to an authorization issue in the initiate remote session functionality.
Published: 2026-01-13T14:10:55.954Z
Updated: 2026-02-26T15:04:46.432Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6105 vulnerable 2026-06-08 06:19:46.218659 ManageEngine Information Disclosure in Multiple Products
MEDIUM (5.5)
An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user with access to the host where an affected ManageEngine product is installed can view and use the exposed key to decrypt product database passwords. This allows the user to access the ManageEngine product database.
Published: 2023-11-15T20:57:47.981Z
Updated: 2025-02-13T17:26:03.759Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2291 vulnerable 2026-06-08 06:02:41.987565 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47966 vulnerable 2026-06-08 05:50:41.102757 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47523 vulnerable 2026-06-08 05:50:40.712508 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43672 vulnerable 2026-06-08 05:49:33.722715 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43671 vulnerable 2026-06-08 05:49:33.718108 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35405 vulnerable 2026-06-08 05:46:04.857645 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33617 vulnerable 2026-06-08 05:32:11.882319 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31857 vulnerable 2026-06-08 05:31:54.032266 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9346 vulnerable 2026-06-08 05:27:21.228214 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17698 vulnerable 2026-06-08 05:09:09.763727 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5459 vulnerable 2026-06-08 05:06:50.082377 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.