CVE-2021-31857: Zohocorp ManageEngine Password Manager Pro

Medium severity, CVSS 5.9. EPSS: 3.1% chance of exploitation in the next 30 days.

In Zoho ManageEngine Password Manager Pro before 11.1 build 11104, attackers are able to retrieve credentials via a browser extension for non-website resource types.

Affected products

• Zohocorp ManageEngine Password Manager Pro: before 11.1 (fixed in 11.1); version 11.1 only

Published 2021-06-16. Last modified 2026-06-17.