Lucene search
K

14 matches found

RedhatCVE
RedhatCVE
added yesterday3 views

CVE-2026-5785

Zohocorp ManageEngine PAM360 versions before 8531 and ManageEngine Password Manager Pro versions from 8600 to 13230 are vulnerable to Authenticated SQL injection in the query report module...

8.1CVSS5.6AI score0.00028EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/16 3:31 p.m.3 views

EUVD-2026-23239

Zohocorp ManageEngine PAM360 versions before 8531 and ManageEngine Password Manager Pro versions from 8600 to 13230 are vulnerable to Authenticated SQL injection in the query report module...

8.1CVSS5.9AI score0.00028EPSS
Exploits0References2
NVD
NVD
added 2026/04/16 2:16 p.m.0 views

CVE-2026-5785

Zohocorp ManageEngine PAM360 versions before 8531 and ManageEngine Password Manager Pro versions from 8600 to 13230 are vulnerable to Authenticated SQL injection in the query report module...

8.1CVSS0.00028EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/04/16 1:46 p.m.24 views

CVE-2026-5785 SQL Injection

Zohocorp ManageEngine PAM360 versions before 8531 and ManageEngine Password Manager Pro versions from 8600 to 13230 are vulnerable to Authenticated SQL injection in the query report module...

8.1CVSS0.00028EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/16 1:46 p.m.2 views

CVE-2026-5785

Zohocorp ManageEngine PAM360 versions before 8531 and ManageEngine Password Manager Pro versions from 8600 to 13230 are vulnerable to Authenticated SQL injection in the query report module...

8.1CVSS5.9AI score0.00028EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2026/04/16 1:46 p.m.4 views

CVE-2026-5785

The CVE-2026-5785 issue affects Zohocorp ManageEngine PAM360 (versions before 8531) and ManageEngine Password Manager Pro (versions 8600 to 13230). The vulnerability is an Authenticated SQL injection in the query report module, allowing an attacker with LOW privileges and no user interaction to t...

8.1CVSS5.9AI score0.00028EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/04/16 1:46 p.m.3 views

CVE-2026-5785 SQL Injection

Zohocorp ManageEngine PAM360 versions before 8531 and ManageEngine Password Manager Pro versions from 8600 to 13230 are vulnerable to Authenticated SQL injection in the query report module...

8.1CVSS5.9AI score0.00028EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/16 12:0 a.m.2 views

PT-2026-33319

Name of the Vulnerable Software and Affected Versions ManageEngine PAM360 versions prior to 8531 ManageEngine Password Manager Pro versions 8600 through 13230 Description An authenticated SQL injection exists in the query report module. SQL injection is a type of flaw that allows an attacker to...

8.1CVSS5.8AI score0.00028EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2025/05/22 9:0 p.m.1 views

CVE-2021-2377

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: SQR. Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

4.3CVSS4.9AI score0.00178EPSS
Exploits0References1
OSV
OSV
added 2023/08/11 2:15 p.m.1 views

CVE-2020-27449

Cross Site Scripting XSS vulnerability in Query Report feature in Zoho ManageEngine Password Manager Pro version 11001, allows remote attackers to execute arbitrary code and steal cookies via crafted JavaScript payload...

6.1CVSS6.1AI score0.01385EPSS
Exploits0References2
CVE
CVE
added 2023/08/11 12:0 a.m.29 views

CVE-2020-27449

CVE-2020-27449 affects Zoho ManageEngine Password Manager Pro (version 11.0.0.1, Query Report feature). The issue is a Cross-Site Scripting (XSS) vulnerability stemming from insufficient input filtering/escaping in the Query Report function that could allow remote attackers to execute arbitrary w...

6.1CVSS6.1AI score0.01385EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/08/11 12:0 a.m.9 views

CVE-2020-27449

Cross Site Scripting XSS vulnerability in Query Report feature in Zoho ManageEngine Password Manager Pro version 11001, allows remote attackers to execute arbitrary code and steal cookies via crafted JavaScript payload...

6.5AI score0.01385EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/08/11 12:0 a.m.12 views

CVE-2020-27449

Cross Site Scripting XSS vulnerability in Query Report feature in Zoho ManageEngine Password Manager Pro version 11001, allows remote attackers to execute arbitrary code and steal cookies via crafted JavaScript payload...

6.2AI score0.01385EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/04/20 12:0 a.m.1 views

Oracle PeopleSoft Enterprise PeopleTools 安全漏洞

Oracle PeopleSoft Enterprise PeopleTools provides a comprehensive set of development tools that support the development and runtime of PeopleSoft applications. A security vulnerability exists in the SQR component of Oracle PeopleSoft Enterprise PeopleTools versions 8.56, 8.57, and 8.58. An attack...

7.4CVSS5.6AI score0.0014EPSS
Exploits0References4
Rows per page
Query Builder