Login Request a demo
MA
Product
ManageEngine Access Manager Plus
by Zohocorp · last CVE Sep 2, 2026
On CISA KEVExploited in the wildRansomware-linked
12
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 8High 3Medium 1Low 0
Severity
All severities12Critical8High3Medium1Low0
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add ManageEngine Access Manager Plus to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-14828
8.8
3%
Sep 2
Zohocorp ManageEngine Password Manager Pro versions before 13235, PAM360 versions before 8561, and Access Manager Plus versions before 4405 are vulnerable to an authenticated SQL…
Affected: before 4405
CVE-2025-11669
8.1
1%
Jan 13
Broken Access Control
Affected: before 4401
CVE-2023-2291
7.8
1%
Apr 26
Static credentials exist in the PostgreSQL data used in ManageEngine Access Manager Plus (AMP) build 4309, ManageEngine Password Manager Pro, and ManageEngine PAM360
Affected: 4.3
Showing 3