vulnerability

Zoho ManageEngine PasswordManager Pro: CVE-2024-5546: Authenticated SQL Injection

Severity
9
CVSS
(AV:N/AC:L/Au:S/C:C/I:C/A:P)
Published
Jun 14, 2024
Added
Dec 23, 2024
Modified
Jul 2, 2025

Description

An authenticated SQL Injection was affected ManageEngine Password Manager Pro and PAM360 products via global search option which has been fixed and released.

Solution

zoho-manageengine-passwordmanager-pro-upgrade-latest
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.