Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

119 matches found

Prion
Prion•added 2022/07/19 3:15 p.m.•38 views

Remote code execution

Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote code execution. This also affects ManageEngine Access Manager Plus before 4303 with authentication...

7.5CVSS9.7AI score0.99927EPSS
SaveExploits5References2Affected Software3
Cvelist
Cvelist•added 2022/07/19 2:51 p.m.•51 views

CVE-2022-35405

Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote code execution. This also affects ManageEngine Access Manager Plus before 4303 with authentication...

10AI score0.99927EPSS
SaveExploits5References2
CVE
CVE•added 2022/07/19 2:51 p.m.•896 views

CVE-2022-35405

CVE-2022-35405 affects Zoho ManageEngine PAM360 (before 5.5/5510) and Password Manager Pro (before 12.1/12101), plus Access Manager Plus (before 4.3/4303 with auth). The root cause is a Java deserialization issue in XML-RPC handling that enables unauthenticated RCE for Password Manager Pro and PA...

9.8CVSS9.7AI score0.99927EPSS
SaveIn wildExploits5References3Affected Software3
ATTACKERKB
ATTACKERKB•added 2022/07/19 12:00 a.m.•57 views

CVE-2022-35405

Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote code execution. This also affects ManageEngine Access Manager Plus before 4303 with authentication. Recent assessments: gwillcox-r7 at October 25, 2022 5:15pm UTC reported: This was...

9.8CVSS9.8AI score0.99927EPSS
SaveIn wildExploits5References3
Tenable Nessus
Tenable Nessus•added 2022/05/23 12:00 a.m.•48 views

ManageEngine PAM360 REST API Restriction Bypass (CVE-2022-29081)

Binary data manageenginepam360cve-2022-29081.nbin...

9.8CVSS9.6AI score0.83543EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus•added 2022/05/23 12:00 a.m.•22 views

ManageEngine PAM360 Detection

Binary data manageenginepam360detect.nbin...

7.3AI score
SaveExploits0References1
NVD
NVD•added 2022/04/28 8:15 p.m.•23 views

CVE-2022-29081

Zoho ManageEngine Access Manager Plus before 4302, Password Manager Pro before 12007, and PAM360 before 5401 are vulnerable to access-control bypass on a few Rest API URLs for SSOutAction. SSLAction. LicenseMgr. GetProductDetails. GetDashboard. FetchEvents. and Synchronize via the ../RestAPI...

9.8CVSS0.83543EPSS
SaveExploits1References2
OSV
OSV•added 2022/04/28 8:15 p.m.•8 views

CVE-2022-29081

Zoho ManageEngine Access Manager Plus before 4302, Password Manager Pro before 12007, and PAM360 before 5401 are vulnerable to access-control bypass on a few Rest API URLs for SSOutAction. SSLAction. LicenseMgr. GetProductDetails. GetDashboard. FetchEvents. and Synchronize via the ../RestAPI...

9.8CVSS7.3AI score0.83543EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB•added 2022/04/28 8:15 p.m.•19 views

CVE-2022-29081

Zoho ManageEngine Access Manager Plus before 4302, Password Manager Pro before 12007, and PAM360 before 5401 are vulnerable to access-control bypass on a few Rest API URLs for SSOutAction. SSLAction. LicenseMgr. GetProductDetails. GetDashboard. FetchEvents. and Synchronize via the ../RestAPI...

9.8CVSS7.2AI score0.83543EPSS
SaveExploits1References4
Prion
Prion•added 2022/04/28 8:15 p.m.•26 views

Design/Logic Flaw

Zoho ManageEngine Access Manager Plus before 4302, Password Manager Pro before 12007, and PAM360 before 5401 are vulnerable to access-control bypass on a few Rest API URLs for SSOutAction. SSLAction. LicenseMgr. GetProductDetails. GetDashboard. FetchEvents. and Synchronize via the ../RestAPI...

7.5CVSS9.3AI score0.83543EPSS
SaveExploits1References2Affected Software3
Cvelist
Cvelist•added 2022/04/28 7:16 p.m.•39 views

CVE-2022-29081

Zoho ManageEngine Access Manager Plus before 4302, Password Manager Pro before 12007, and PAM360 before 5401 are vulnerable to access-control bypass on a few Rest API URLs for SSOutAction. SSLAction. LicenseMgr. GetProductDetails. GetDashboard. FetchEvents. and Synchronize via the ../RestAPI...

9.7AI score0.83543EPSS
SaveExploits1References2
CVE
CVE•added 2022/04/28 7:16 p.m.•585 views

CVE-2022-29081

CVE-2022-29081 affects Zoho ManageEngine products: Access Manager Plus (before 4302), Password Manager Pro (before 12007), and PAM360 (before 5401). The issue is an access-control bypass on certain REST API endpoints (SSOutAction, SSLAction, LicenseMgr, GetProductDetails, GetDashboard, FetchEvent...

9.8CVSS9.4AI score0.83543EPSS
SaveIn wildExploits1References2Affected Software3
OSV
OSV•added 2021/12/20 4:15 p.m.•13 views

CVE-2021-44525

Zoho ManageEngine PAM360 before build 5303 allows attackers to modify a few aspects of application state because of a filter bypass in which authentication is not required...

9.8CVSS5.8AI score0.03427EPSS
SaveExploits0References1
NVD
NVD•added 2021/12/20 4:15 p.m.•20 views

CVE-2021-44525

Zoho ManageEngine PAM360 before build 5303 allows attackers to modify a few aspects of application state because of a filter bypass in which authentication is not required...

9.8CVSS0.03427EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB•added 2021/12/20 4:15 p.m.•11 views

CVE-2021-44525

Zoho ManageEngine PAM360 before build 5303 allows attackers to modify a few aspects of application state because of a filter bypass in which authentication is not required...

9.8CVSS7.3AI score0.03427EPSS
SaveExploits0References2
Prion
Prion•added 2021/12/20 4:15 p.m.•23 views

Authentication flaw

Zoho ManageEngine PAM360 before build 5303 allows attackers to modify a few aspects of application state because of a filter bypass in which authentication is not required...

7.5CVSS9.4AI score0.03427EPSS
SaveExploits0References1Affected Software1
CVE
CVE•added 2021/12/20 3:06 p.m.•60 views

CVE-2021-44525

Zoho ManageEngine PAM360 before build 5303 contains an authentication filter bypass that allows attackers to modify certain aspects of the application state. Affected software: PAM360 (versions prior to build 5303). Root cause: bypass of authentication in a filter. Impact: potential modification ...

9.8CVSS9.5AI score0.03427EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist•added 2021/12/20 3:06 p.m.•31 views

CVE-2021-44525

Zoho ManageEngine PAM360 before build 5303 allows attackers to modify a few aspects of application state because of a filter bypass in which authentication is not required...

9.8AI score0.03427EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies•added 2021/12/20 12:00 a.m.•14 views

PT-2021-24123 · Zoho · Zoho Manageengine Pam360

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine PAM360 versions prior to build 5303 Description: The issue allows attackers to modify certain aspects of application state due to a filter bypass that does not require authentication. Recommendations: For versions prior to...

9.8CVSS9.4AI score0.03427EPSS
SaveExploits0References3
Rows per page
Query Builder