Manageengine Pam360

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:zohocorp:manageengine_pam360:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorZohocorp (4f1ab088-ab0e-54ac-b0dc-2304879a7502)
ProductManageengine Pam360 (d3ab6aeb-9201-5d3b-89fc-42e018f263be)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-5785 vulnerable 2026-06-08 08:07:04.089570 SQL Injection
HIGH (8.1)
Zohocorp ManageEngine PAM360 versions before 8531 and ManageEngine Password Manager Pro versions from 8600 to 13230 are vulnerable to Authenticated SQL injection in the query report module.
Published: 2026-04-16T13:46:28.313Z
Updated: 2026-04-17T03:55:15.059Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11669 vulnerable 2026-06-08 07:04:28.728722 Broken Access Control
HIGH (8.1)
Zohocorp ManageEngine PAM360 versions before 8202; Password Manager Pro versions before 13221; Access Manager Plus versions prior to 4401 are vulnerable to an authorization issue in the initiate remote session functionality.
Published: 2026-01-13T14:10:55.954Z
Updated: 2026-02-26T15:04:46.432Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27312 vulnerable 2026-06-08 06:31:28.504391 Authorization vulnerability in PAM360
HIGH (8.1)
Zohocorp ManageEngine PAM360 version 6601 is vulnerable to authorization vulnerability which allows a low-privileged user to perform admin actions. Note: This vulnerability affects only the PAM360 6600 version. No other versions are applicable to this vulnerability.
Published: 2024-05-20T12:38:26.180Z
Updated: 2024-10-07T11:45:01.627Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6105 vulnerable 2026-06-08 06:19:46.217351 ManageEngine Information Disclosure in Multiple Products
MEDIUM (5.5)
An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user with access to the host where an affected ManageEngine product is installed can view and use the exposed key to decrypt product database passwords. This allows the user to access the ManageEngine product database.
Published: 2023-11-15T20:57:47.981Z
Updated: 2025-02-13T17:26:03.759Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2291 vulnerable 2026-06-08 06:02:41.986423 Details available
Static credentials exist in the PostgreSQL data used in ManageEngine Access Manager Plus (AMP) build 4309, ManageEngine Password Manager Pro, and ManageEngine PAM360. These credentials could allow a malicious actor to modify configuration data that would escalate their permissions from that of a low-privileged user to an Administrative user.
Published: 2023-04-26T00:00:00.000Z
Updated: 2025-02-03T17:31:55.129Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47966 vulnerable 2026-06-08 05:50:41.100004 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47523 vulnerable 2026-06-08 05:50:40.714177 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43672 vulnerable 2026-06-08 05:49:33.722492 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43671 vulnerable 2026-06-08 05:49:33.715866 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35405 vulnerable 2026-06-08 05:46:04.855672 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.