Login Request a demo
MP
Product
ManageEngine PAM360
by Zohocorp · last CVE Sep 2, 2026
On CISA KEVExploited in the wildRansomware-linked
18
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities18In the news0Timeline
Severity mix
Critical 8High 8Medium 2Low 0
Severity
All severities18Critical8High8Medium2Low0
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add ManageEngine PAM360 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-47966
RansomwareIn wildKEV
9.8
100%
Jan 18
Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
Affected: before 5.7; 5.7; 5.7; 5.7; 5.7
CVE-2022-35405
In wildKEV
9.8
100%
Jul 19
Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
Affected: before 5.5; 5.5
CVE-2022-47523
9.8
71%
Jan 5
Zoho ManageEngine Access Manager Plus before 4309, Password Manager Pro before 12210, and PAM360 before 5801 are vulnerable to SQL Injection
Affected: before 5.8; 5.8
CVE-2022-43672
9.8
67%
Nov 12
Zoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus before 4306 allow SQL Injection (in a different software component relative to…
Affected: before 5.7; 5.7; 5.7
CVE-2022-43671
9.8
75%
Nov 12
Zoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus before 4306 allow SQL Injection
Affected: before 5.7; 5.7; 5.7
CVE-2022-40300
9.8
99%
Sep 16
Zoho ManageEngine Password Manager Pro through 12120 before 12121, PAM360 through 5550 before 5600, and Access Manager Plus through 4304 before 4305 have multiple SQL injection…
Affected: 4.0; 4.0; 4.0; 4.1; 4.1; 4.1; +27 more
CVE-2022-29081
9.8
84%
Apr 28
Zoho ManageEngine Access Manager Plus before 4302, Password Manager Pro before 12007, and PAM360 before 5401 are vulnerable to access-control bypass on a few Rest API URLs (for…
Affected: 4.0; 4.0; 4.1; 4.1; 4.5; 4.5; +11 more
CVE-2021-44525
9.8
4%
Dec 20
Zoho ManageEngine PAM360 before build 5303 allows attackers to modify a few aspects of application state because of a filter bypass in which authentication is not required
Affected: 4.0; 4.0; 4.0; 4.1; 4.1; 4.1; +17 more
Showing 8