CVE-2024-5546: Zohocorp ManageEngine PAM360

High severity, CVSS 8.8. EPSS: 3% chance of exploitation in the next 30 days.

Zohocorp ManageEngine Password Manager Pro versions before 12431 and ManageEngine PAM360 versions before 7001 are affected by authenticated SQL Injection vulnerability via a global search option.

Affected products

• Zohocorp ManageEngine PAM360: version 4.0 only; version 4.1 only; version 4.5 only; version 5.0 only; version 5.1 only; version 5.2 only; …
• Zohocorp ManageEngine Password Manager Pro: version 6.0 only; version 6.1 only; version 6.2 only; version 6.4 only; version 6.5 only; version 6.6 only; …

Published 2024-08-28. Last modified 2026-06-17.