CVE-2021-44525: Zohocorp ManageEngine PAM360

Critical severity, CVSS 9.8. EPSS: 3.4% chance of exploitation in the next 30 days.

Zoho ManageEngine PAM360 before build 5303 allows attackers to modify a few aspects of application state because of a filter bypass in which authentication is not required.

Affected products

• Zohocorp ManageEngine PAM360: version 4.0 only; version 4.1 only; version 4.5 only; version 5.0 only; version 5.1 only; version 5.2 only; …

Published 2021-12-20. Last modified 2026-06-17.