MP
Product
ManageEngine Password Manager Pro
On CISA KEVExploited in the wildRansomware-linked
26
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 9Medium 6Low 0
Watch
Add ManageEngine Password Manager Pro to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-1159 | 6.5 | Mar 9 | In ZOHO Password Manager Pro (PMP) 8.3.0 (Build 8303) and 8.4.0 (Build 8400,8401,8402), underprivileged users can obtain sensitive information (entry password history) via a… Affected: 8.3; 8.4; 8.4; 8.4 |
| CVE-2020-27449 | 6.1 | Aug 11 | Cross Site Scripting (XSS) vulnerability in Query Report feature in Zoho ManageEngine Password Manager Pro version 11001, allows remote attackers to execute arbitrary code and… Affected: 11.1 |
| CVE-2017-17698 | 6.1 | Dec 15 | Zoho ManageEngine Password Manager Pro 9 before 9.4 (9400) has reflected XSS in SearchResult.ec and BulkAccessControlView.ec Affected: 9.0 before 9.4 |
| CVE-2021-31857 | 5.9 | Jun 16 | In Zoho ManageEngine Password Manager Pro before 11.1 build 11104, attackers are able to retrieve credentials via a browser extension for non-website resource types Affected: before 11.1; 11.1; 11.1; 11.1; 11.1 |
| CVE-2023-6105 | 5.5 | Nov 15 | An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed Affected: before 12.3 |
| CVE-2021-33617 | 5.3 | Jul 31 | Zoho ManageEngine Password Manager Pro before 11.2 11200 allows login/AjaxResponse.jsp?RequestType=GetUserDomainName&userName= username enumeration, because the response (to a… Affected: before 11.2; 11.2 |
Showing 6