PAM360 vulnerabilities

2 known vulnerabilities in PAM360 from ManageEngine. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Password Manager Pro: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-5546Aug 28, 2024ManageEngineEPSS 3.04%

  Zohocorp ManageEngine Password Manager Pro versions before 12431 and ManageEngine PAM360 versions before 7001 are affected by authenticated SQL Injection vulnerability via a global search option.

• 8.1 High severity

  PAM360: Incorrect Authorization

  CVE-2024-27312May 20, 2024ManageEngine

  Zohocorp ManageEngine PAM360 version 6601 is vulnerable to authorization vulnerability which allows a low-privileged user to perform admin actions. Note: This vulnerability affects only the PAM360 6600 version. No other versions are applicable to this vulnerab