MA
Product
ManageEngine Access Manager Plus
On CISA KEVExploited in the wildRansomware-linked
12
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 3Medium 1Low 0
Watch
Add ManageEngine Access Manager Plus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-47966 RansomwareIn wildKEV | 9.8 | Jan 18 | Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Affected: before 4.3; 4.3; 4.3; 4.3; 4.3; 4.3; +3 more |
| CVE-2022-35405 In wildKEV | 9.8 | Jul 19 | Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Affected: before 4.3; 4.3; 4.3; 4.3 |
| CVE-2022-47523 | 9.8 | Jan 5 | Zoho ManageEngine Access Manager Plus before 4309, Password Manager Pro before 12210, and PAM360 before 5801 are vulnerable to SQL Injection Affected: before 4.3; 4.3; 4.3; 4.3; 4.3; 4.3; +4 more |
| CVE-2022-43672 | 9.8 | Nov 12 | Zoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus before 4306 allow SQL Injection (in a different software component relative to… Affected: before 4.3; 4.3; 4.3; 4.3; 4.3; 4.3; +1 more |
| CVE-2022-43671 | 9.8 | Nov 12 | Zoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus before 4306 allow SQL Injection Affected: before 4.3; 4.3; 4.3; 4.3; 4.3; 4.3; +1 more |
| CVE-2022-40300 | 9.8 | Sep 16 | Zoho ManageEngine Password Manager Pro through 12120 before 12121, PAM360 through 5550 before 5600, and Access Manager Plus through 4304 before 4305 have multiple SQL injection… Affected: 4.0; 4.1; 4.1; 4.2; 4.2; 4.2; +6 more |
| CVE-2022-29081 | 9.8 | Apr 28 | Zoho ManageEngine Access Manager Plus before 4302, Password Manager Pro before 12007, and PAM360 before 5401 are vulnerable to access-control bypass on a few Rest API URLs (for… Affected: 4.0; 4.1; 4.1; 4.2; 4.2; 4.2; +3 more |
| CVE-2021-44676 | 9.8 | Dec 20 | Zoho ManageEngine Access Manager Plus before 4203 allows anyone to view a few data elements (e.g., access control details) and modify a few aspects of the application state Affected: 4.1; 4.1; 4.2; 4.2; 4.2 |
| CVE-2026-14828 | 8.8 | Sep 2 | Zohocorp ManageEngine Password Manager Pro versions before 13235, PAM360 versions before 8561, and Access Manager Plus versions before 4405 are vulnerable to an authenticated SQL… Affected: before 4405 |
| CVE-2025-11669 | 8.1 | Jan 13 | Zohocorp ManageEngine PAM360 versions before 8202; Password Manager Pro versions before 13221; Access Manager Plus versions prior to 4401 are vulnerable to an authorization issue… Affected: before 4.4; 4.4 |
| CVE-2023-2291 | 7.8 | Apr 26 | Static credentials exist in the PostgreSQL data used in ManageEngine Access Manager Plus (AMP) build 4309, ManageEngine Password Manager Pro, and ManageEngine PAM360 Affected: 4.3 |
| CVE-2023-6105 | 5.5 | Nov 15 | An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed Affected: before 4.3; 4.3; 4.3; 4.3; 4.3; 4.3; +5 more |
Showing 12