Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

zohocorp manageengine password manager pro 11.1 vulnerabilities and exploits

(subscribe to this query)
383
VMScore
CVE-2021-31857
In Zoho ManageEngine Password Manager Pro prior to 11.1 build 11104, attackers are able to retrieve credentials via a browser extension for non-website resource types.
Zohocorp Manageengine Password Manager Pro 11.1Zohocorp Manageengine Password Manager Pro
NA
CVE-2022-40300
Zoho ManageEngine Password Manager Pro through 12120 prior to 12121, PAM360 through 5550 prior to 5600, and Access Manager Plus through 4304 prior to 4305 have multiple SQL injection vulnerabilities.
Zohocorp Manageengine Password Manager Pro 5.4Zohocorp Manageengine Password Manager Pro 6.3Zohocorp Manageengine Password Manager Pro 5.3Zohocorp Manageengine Password Manager Pro 6.4Zohocorp Manageengine Password Manager Pro 6.9Zohocorp Manageengine Password Manager Pro 6.0Zohocorp Manageengine Password Manager Pro 6.2Zohocorp Manageengine Password Manager Pro 6.5Zohocorp Manageengine Password Manager Pro 5.0Zohocorp Manageengine Password Manager Pro 5.1Zohocorp Manageengine Password Manager Pro 5.2Zohocorp Manageengine Password Manager Pro 6.1Zohocorp Manageengine Password Manager Pro 6.6Zohocorp Manageengine Password Manager Pro 6.7Zohocorp Manageengine Password Manager Pro 6.8Zohocorp Manageengine Password Manager Pro 7.0Zohocorp Manageengine Access Manager Plus 4.1Zohocorp Manageengine Access Manager Plus 4.2Zohocorp Manageengine Password Manager Pro 10.0Zohocorp Manageengine Password Manager Pro 10.1Zohocorp Manageengine Password Manager Pro 10.2Zohocorp Manageengine Password Manager Pro 10.3
668
VMScore
CVE-2022-29081
Zoho ManageEngine Access Manager Plus prior to 4302, Password Manager Pro prior to 12007, and PAM360 prior to 5401 are vulnerable to access-control bypass on a few Rest API URLs (for SSOutAction. SSLAction. LicenseMgr. GetProductDetails. GetDashboard. FetchEvents. and Synchronize...
Zohocorp Manageengine Password Manager Pro 10.4Zohocorp Manageengine Password Manager Pro 10.3Zohocorp Manageengine Password Manager Pro 10.2Zohocorp Manageengine Password Manager Pro 10.1Zohocorp Manageengine Password Manager Pro 11.1Zohocorp Manageengine Access Manager Plus 4.2Zohocorp Manageengine Pam360 5.3Zohocorp Manageengine Pam360 5.2Zohocorp Manageengine Pam360 5.1Zohocorp Manageengine Pam360 5.0Zohocorp Manageengine Pam360 4.5Zohocorp Manageengine Pam360 4.1Zohocorp Manageengine Pam360 4.0Zohocorp Manageengine Access Manager Plus 4.1Zohocorp Manageengine Pam360 5.4Zohocorp Manageengine Password Manager Pro 12.0Zohocorp Manageengine Password Manager Pro 11.3Zohocorp Manageengine Password Manager Pro 11.2Zohocorp Manageengine Access Manager Plus 4.3Zohocorp Manageengine Access Manager Plus 4.0
NA
CVE-2020-27449
Cross Site Scripting (XSS) vulnerability in Query Report feature in Zoho ManageEngine Password Manager Pro version 11001, allows remote malicious users to execute arbitrary code and steal cookies via crafted JavaScript payload.
Zohocorp Manageengine Password Manager Pro 11.1
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook